V10.8.0/post ci refinement

[gimlichael]

This pull request introduces a shared verification workflow so PR and release flows use one verification definition. PRs delegate proof to the shared workflow while release keeps authoritative build and pack products caller-owned and replays the same proof on canonical main.

Shared verification:

• Single reusable definition covers build, pack, Linux and Windows tests, optional macOS tests, SQL Server integration, SonarCloud, Codecov, CodeQL and quality gates with fork and input aware privilege handling.
• PRs delegate to the shared proof with preserved aggregate required check and optional macOS matrix.
• Verification packages use separate artifact names so they do not mix with authoritative release products.

Release products:

• Release builds, packs and validates authoritative NuGet products first with package version checked against the release tag.
• Post release assurance reuses the shared proof on the exact released SHA with canonical main reporting and optional macOS replay.
• Release summary and recovery messaging now report product results plus one shared verification outcome.

[greptile-apps]

Confidence Score: 5/5

[Critical risk] Restructures build and release CI pipelines.

The PR appears safe to merge based on the reviewed changes.

Summary

The PR moves PR and post-release checks into a shared verification workflow while keeping authoritative package build, validation, and publication in the release workflow.

• The latest changes let post-release verification proceed after NuGet publication even if OCI finalization fails.
• Canonical-main assurance now checks SonarCloud, Codecov, and CodeQL records for the released SHA.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[PR] --> V[Shared verification]
  R[Release tag] --> B[Build and validate products]
  B --> N[Publish NuGet]
  N --> V
  N --> O[Finalize OCI assets]
  V --> S[Release status]
  O --> S

Loading

_{Reviews (2) · Last reviewed commit: "🐛 verify published packages independent..."}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.77%. Comparing base (33e6e75) to head (6eec298).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #174      +/-   ##
==========================================
+ Coverage   90.06%   93.77%   +3.70%     
==========================================
  Files         606      608       +2     
  Lines       12884    19273    +6389     
  Branches     1819     1865      +46     
==========================================
+ Hits        11604    18073    +6469     
- Misses        781     1172     +391     
+ Partials      499       28     -471     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.