refactor: consolidate release pipeline with draft-first pattern #353

	---
	name: Lint GitHub Actions workflows
	on: [push, pull_request]
	permissions:
	contents: read
	jobs:
	actionlint:
	runs-on: ubuntu-latest
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
	with:
	egress-policy: audit
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false
	- name: Check workflow files
	uses: docker://rhysd/actionlint:latest
	with:
	args: -color

Provide feedback