ci: validate release branch-rules (#527)

* ci: pin FW-CI-templates to NVIDIA-NeMo/FW-CI-templates#480 (mirror branch protection)

Companion PR to NVIDIA-NeMo/FW-CI-templates#480, which mirrors the
branch-protection rule of `[rv][0-9].[0-9].[0-9]` onto `deploy-release/*` so
the validate-only release rehearsal is gated by the same required status
checks as a real release.

Pinned to commit f680963ed397a4ff0cd4c983a3a3071c209e5e77 on `ko3n1g/feat/mirror-release-branch-protection`.
Re-pin to a released tag once FW-CI-templates#480 lands.

Signed-off-by: oliver könig <okoenig@nvidia.com>

* ci: bump FW-CI-templates pin to 3c679d436baa0b926766e9b1e6d149803c506b5d

Signed-off-by: oliver könig <okoenig@nvidia.com>

* ci: bump FW-CI-templates pin to 57cc8e1ed81d8a1d83cecb2e4a54e04144623bcf

Signed-off-by: oliver könig <okoenig@nvidia.com>

* ci: bump FW-CI-templates pin to d8ca5ec4a4c4242d0bc2438aa838adebd83e05c4

Signed-off-by: oliver könig <okoenig@nvidia.com>

* ci: bump FW-CI-templates pin to 46808077ddf43d9815a3df66223a90bb09ab3a3e

Signed-off-by: oliver könig <okoenig@nvidia.com>

* ci: re-pin FW-CI-templates from SHA to v1.4.0

Signed-off-by: oliver könig <okoenig@nvidia.com>

---------

Signed-off-by: oliver könig <okoenig@nvidia.com>

Author: ko3n1g

.github/workflows/release.yml

@@ -63,7 +63,7 @@ concurrency:
 jobs:
   release:
     if: '!cancelled()'
-    uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_release_library.yml@v1.0.0
+    uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_release_library.yml@v1.4.0
     with:
       release-ref: ${{ inputs.release-ref || github.sha }}
       python-package: nemo_run