fix: update release yaml to follow semantic release gha

Ticket: WP-5314

Author: mohammadalfaiyazbitgo

.github/workflows/release.yaml

@@ -2,32 +2,66 @@
 name: Release
 
 permissions:
-  # Required by AWS CodeArtifact
-  id-token: write
-
   # Required by semantic-release
   contents: write
   pull-requests: write
   issues: write
 
 on:
-  push:
-    branches:
-      - master
-      - next
-      - next-major
-      - beta
-      - alpha
-      - "[0-9]+.[0-9]+.x"
-      - "[0-9]+.x"
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: 'Dry run (no actual release)'
+        required: false
+        type: boolean
+        default: false
 
 jobs:
   release:
-    uses: BitGo/gha-release-typescript-library/.github/workflows/release.yml@v3
-    with:
-      lint-node-version: '22.x'
-      test-node-versions: '["22.x"]'
-      release-node-version: '22.x'
-      build-command: 'yarn build'
-      test-command: 'yarn test'
-      allow-postinstall-scripts: false
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22.x'
+          cache: 'yarn'
+      
+      - name: Cache dependencies
+        uses: actions/cache@v3
+        id: node-modules-cache
+        with:
+          path: '**/node_modules'
+          key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-modules-
+      
+      - name: Install dependencies
+        if: steps.node-modules-cache.outputs.cache-hit != 'true'
+        run: yarn install
+      
+      - name: Build
+        run: yarn build
+        
+      - name: Test
+        run: yarn test
+        env:
+          NODE_OPTIONS: '--max-old-space-size=4096'
+          MASTER_BITGO_EXPRESS_KEYPATH: ./test-ssl-key.pem
+          MASTER_BITGO_EXPRESS_CRTPATH: ./test-ssl-cert.pem
+          MTLS_ENABLED: true
+          MTLS_REQUEST_CERT: true
+          MTLS_REJECT_UNAUTHORIZED: false
+          KMS_URL: 'https://localhost:3000/'
+      
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DRY_RUN: ${{ github.event.inputs.dry_run }}
+        run: npx semantic-release${DRY_RUN == 'true' && ' --dry-run' || ''}