fix(ci): drop [skip ci] from release commits so cloud builds run on release (#1696)

* fix(ci): dispatch cloud prod release from the production release workflow

The release commit is marked `[skip ci]`, which also suppresses the push
event for the release tag, so release-cloud-prod.yml never ran on tag push.
Dispatch it explicitly against the new tag from release-prod.yml, and fail
fast in release-cloud-prod.yml when it is run from a non-tag ref.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(ci): drop [skip ci] from release commits instead of dispatching cloud prod

`[skip ci]` on the release commit also suppressed the push event for the
release tag, so release-cloud-prod.yml never ran on tag push. Removing it
lets the tag push trigger the cloud prod build (and the main push trigger
the cloud staging build), so the explicit dispatch job is no longer needed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: brendan-kellam

.github/workflows/release-cloud-prod.yml

@@ -14,7 +14,23 @@ concurrency:
   cancel-in-progress: false
 
 jobs:
+  # The image tags below are only enabled for `v*` tag refs. Fail fast with a
+  # clear error when dispatched from a branch rather than letting buildx fail
+  # with "tag is needed when pushing to registry".
+  validate-ref:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Require a release tag ref
+        env:
+          REF: ${{ github.ref }}
+        run: |
+          if [[ "$REF" != refs/tags/v* ]]; then
+            echo "::error::Cloud production releases must run against a release tag (got '$REF'). Re-run with: gh workflow run release-cloud-prod.yml --ref v<version>"
+            exit 1
+          fi
+
   build:
+    needs: validate-ref
     uses: ./.github/workflows/_build-cloud.yml
     with:
       environment: prod

.github/workflows/release-prod.yml

@@ -145,7 +145,7 @@ jobs:
       - name: Commit changes
         run: |
           git add CHANGELOG.md packages/shared/src/version.ts docs/api-reference/sourcebot-public.openapi.json
-          git commit -m "[skip ci] Release v$VERSION"
+          git commit -m "Release v$VERSION"
 
       - name: Push to temporary branch
         id: push_temp_branch