Reland: trigger-cmk-distro-package: Only archive on success

The package signing will fail if the created package does not adhere to
requirements that are currently implemented via tests.
The trigger job would still continue to archive results created during
it's run - even though these might be unsigned.

With this change artifacts are only archived for the trigger job if the
signing succeeded.
If these artifacts are of relevance (e.g. for debugging) they now have
to be retrieved at the triggered jobs.

This change avoids situations where build-cmk-deliverables would
download unsigned artifacts from trigger-cmk-distro-package.

References CMK-31275

Change-Id: I287ec56cf7ad8ff8448f7052db9072c3eb8979a6

Author: okin

buildscripts/scripts/trigger-cmk-distro-package.groovy

@@ -43,6 +43,7 @@ void main() {
         }
     }
     def bazel_log_prefix = "bazel_log_";
+    def signing_build_instance = null;
 
     print(
         """
@@ -147,7 +148,7 @@ void main() {
             condition: currentBuild.result == "SUCCESS",
             raiseOnError: true,
         ) {
-            smart_build(
+            signing_build_instance = smart_build(
                 // see global-defaults.yml, needs to run in minimal container
                 use_upstream_build: true,
                 relative_job_name: "${branch_base_folder}/builders/sign-cmk-distro-package",
@@ -171,7 +172,11 @@ void main() {
         }
     }
 
-    stage("Archive stuff") {
+    smart_stage(
+        name: "Archive stuff",
+        condition: signing_build_instance != null && signing_build_instance.result.toString() == "SUCCESS",
+        raiseOnError: true,
+    ) {
         dir("${checkout_dir}") {
             show_duration("archiveArtifacts") {
                 archiveArtifacts(