Separate release artifact publishing to depend on system test completion (#12009)

ci: update one-pipeline to 1.1.0

Add new shared-pipeline stages

Separate release artifact publishing to depend on Gitlab system test completion

Merge branch 'master' into sarahchen6/add-publish-artifact-step

Merge branch 'master' into sarahchen6/add-publish-artifact-step

Co-authored-by: randomanderson <randomanderson@users.noreply.github.com>
Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
Co-authored-by: sarah.chen <sarah.chen@datadoghq.com>

Author: 3 people

.gitlab-ci.yml

@@ -34,6 +34,7 @@ stages:
   - java-post-pr-comment
   - shared-pipeline-build
   - shared-pipeline-test
+  - publish-release-artifacts
   - shared-pipeline-publish
   - benchmarks
   - tests
@@ -1289,8 +1290,11 @@ deploy_to_di_backend:manual:
 # If the deploy_to_maven_central job is re-run, re-trigger the deploy_artifacts_to_github job as well so that the artifacts match.
 deploy_to_maven_central:
   extends: .gradle_build
-  stage: publish
-  needs: [ build ]
+  stage: publish-release-artifacts
+  needs:
+    - job: build
+    - job: system_tests
+      optional: true
   variables:
     CACHE_TYPE: "lib"
   rules:
@@ -1342,7 +1346,7 @@ deploy_snapshot_with_ddprof_snapshot:
       - 'workspace/dd-trace-ot/build/libs/*.jar'
 
 deploy_artifacts_to_github:
-  stage: publish
+  stage: publish-release-artifacts
   image: registry.ddbuild.io/images/dd-octo-sts-ci-base:2025.06-1
   tags: [ "arch:amd64" ]
   id_tokens:
@@ -1409,7 +1413,7 @@ override_verify_maven_central:
 # Verify Maven Central deployment is publicly available before publishing OCI images
 verify_maven_central_deployment:
   image: registry.ddbuild.io/images/base/gbi-ubuntu_2204:release
-  stage: publish
+  stage: publish-release-artifacts
   needs: [ deploy_to_maven_central ]
   rules:
     - if: '$POPULATE_CACHE'
@@ -1461,7 +1465,7 @@ verify_maven_central_deployment:
       done
 
 publishing-gate:
-  stage: publish
+  stage: publish-release-artifacts
   needs:
     - job: verify_maven_central_deployment
       optional: true # Required for releases only