ci: publish GoReleaser drafts after artifact upload

[intel352]

Summary

• configure GoReleaser to keep GitHub releases as drafts while artifacts are uploaded
• publish the draft release only after the release workflow completes artifact/registry steps
• keep release workflows compatible with GitHub immutable releases

Verification

• actionlint on changed GoReleaser release workflow
• git diff --check

[Copilot]

Pull request overview

This PR adjusts the release pipeline so GoReleaser creates GitHub releases as drafts, and the GitHub release is only published at the end of the workflow, after registry-related steps run—supporting GitHub’s immutable release behavior.

Changes:

• Configure GoReleaser to create GitHub releases as drafts (release.draft: true).
• Add a final workflow step that publishes the draft release via gh release edit ... --draft=false.
• Minor hardening of the registry git clone command by quoting the URL.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.goreleaser.yml	Sets GitHub releases to be created as drafts so assets can be uploaded before publishing.
.github/workflows/release.yml	Publishes the draft release at workflow end; minor quoting fix for registry clone URL.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.