Use -C HEAD and --force-with-lease for safer amend push

- `--amend -C HEAD` instead of `--amend --no-edit`: preserves the
  original commit's author (not just message); bot becomes committer only
- `--force-with-lease` instead of `--force`: fails if origin has advanced
  since checkout, preventing accidental overwrite of concurrent pushes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: CasperWA-ai-bot

.github/workflows/cd_release.yml

@@ -71,11 +71,11 @@ jobs:
       if: steps.update_version_step.outputs.continue_workflow == 'true'
       run: |
         git add app/__init__.py CHANGELOG.md
-        git commit --amend --no-edit
+        git commit --amend -C HEAD
 
     - name: Update '${{ env.DEFAULT_REPO_BRANCH }}'
       if: steps.update_version_step.outputs.continue_workflow == 'true'
-      run: git push --force origin ${{ env.DEFAULT_REPO_BRANCH }}
+      run: git push --force-with-lease origin ${{ env.DEFAULT_REPO_BRANCH }}
 
   publish_container_image:
     name: Publish Container image on GH Packages