ci(release): gate release on Maven verification

[mivek]

Summary

• move the semantic-release job into the Maven verification workflow
• require the verify job to succeed before releasing
• restrict publication to successful pushes on main
• serialize releases without cancelling an active publication
• run the lockfile-installed semantic-release binary directly after npm ci --ignore-scripts, without npx on-demand package resolution

Testing

• workflow YAML parsed successfully
• npm ci --ignore-scripts installed the local semantic-release executable
• the local semantic-release executable was callable
• diff whitespace checks passed

[github-actions]

Please check on sonarcloud https://sonarcloud.io/project/pull_requests_list?id=io.github.mivek%3AmetarParser that the PR does not add any issue.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud