GHA Releases: Remove concurrency and fix orchestrator (#7688)

Task/Issue URL:
https://app.asana.com/1/137249556945/task/1213148478389361

### Description
This PR fixes the concurrency issues and fixes the inputs passed to the
orchestrator
Also changes the order of Mattermost messages

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Changes modify the sequencing and parameters of release automation
workflows; mistakes could cause releases to build from the wrong ref or
run steps in an unintended order.
> 
> **Overview**
> The release GitHub Actions orchestration is adjusted to avoid
concurrency/ordering issues: `release_orchestrator.yml` drops
workflow-level `concurrency`, `upload-play-store` now waits on Asana
task creation, and `upload-internal` is invoked with an explicit `ref`
(`develop`).
> 
> Ref handling is standardized so called workflows consistently use
`inputs.ref` (instead of `github.event.inputs.ref`), and
`release_upload_internal.yml` now accepts a required `ref` input and
checks out `${{ inputs.ref || github.ref }}`. Notifications are tweaked
by moving the “release starting” Mattermost message into the
tag-creation workflow and removing it from the Asana task workflow, with
a shared `emoji_start` env added where needed.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
95a775c. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: malmstein

.github/workflows/release_create_tag.yml

@@ -18,6 +18,7 @@ on:
 env:
   ASANA_PAT: ${{ secrets.ASANA_ACCESS_TOKEN }}
   GH_TOKEN: ${{ secrets.GT_DAXMOBILE }}
+  emoji_start: ":flight_departure:" # 🛫
   emoji_info: ":information_source:" # ℹ️
 
 concurrency:
@@ -74,6 +75,16 @@ jobs:
           ruby-version: 2.7.2
           bundler-cache: true
 
+      - name: Notify Mattermost of Release starting
+        id: send-mm-release-starting
+        uses: duckduckgo/native-github-asana-sync@v2.0
+        with:
+          mattermost-token: ${{ secrets.MM_AUTH_TOKEN }}
+          mattermost-team-id: ${{ secrets.MM_TEAM_ID }}
+          mattermost-channel-name: ${{ vars.MM_RELEASE_NOTIFY_CHANNEL }}
+          mattermost-message: ${{env.emoji_start}} Starting release process for version ${{ inputs.app-version }}
+          action: 'send-mattermost-message'
+
       - name: Use fastlane lane to create and push tagged release
         id: create_git_tag
         run: |        

.github/workflows/release_create_task.yml

@@ -17,7 +17,6 @@ on:
 
 env:
   ASANA_PAT: ${{ secrets.ASANA_ACCESS_TOKEN }}
-  emoji_start: ":flight_departure:" # 🛫
   emoji_info: ":information_source:" # ℹ️
 
 concurrency:
@@ -43,16 +42,6 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Notify Mattermost of Release starting
-        id: send-mm-release-starting
-        uses: duckduckgo/native-github-asana-sync@v2.0
-        with:
-          mattermost-token: ${{ secrets.MM_AUTH_TOKEN }}
-          mattermost-team-id: ${{ secrets.MM_TEAM_ID }}
-          mattermost-channel-name: ${{ vars.MM_RELEASE_NOTIFY_CHANNEL }}
-          mattermost-message: ${{env.emoji_start}} Starting release process for version ${{ inputs.app-version }}
-          action: 'send-mattermost-message'
-
       - name: Install dependencies for create-asana-public-release task
         run: |
           python -m pip install --upgrade pip

.github/workflows/release_orchestrator.yml

@@ -8,10 +8,6 @@ on:
         required: true
         default: 'PLACEHOLDER'
 
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
 jobs:
   create-release-tag:
     uses: ./.github/workflows/release_create_tag.yml
@@ -27,7 +23,7 @@ jobs:
     secrets: inherit
 
   upload-play-store:
-    needs: create-release-tag
+    needs: create-asana-release-task
     uses: ./.github/workflows/release_upload_play_store.yml
     with:
       ref: ${{ inputs.app-version }}
@@ -36,4 +32,6 @@ jobs:
   upload-internal:
     needs: upload-play-store
     uses: ./.github/workflows/release_upload_internal.yml
+    with:
+      ref: 'develop'
     secrets: inherit

.github/workflows/release_upload_internal.yml

@@ -4,6 +4,11 @@ on:
   schedule:
     - cron: '15 2 * * *' # run at 2:15 AM UTC
   workflow_call:
+    inputs:
+      ref:
+        description: 'Ref to build APK from (branch, tag, commit)'
+        type: string
+        required: true
   workflow_dispatch:
 
 env:
@@ -25,6 +30,7 @@ jobs:
           submodules: recursive
           token: ${{ secrets.GT_DAXMOBILE }}
           fetch-depth: 0
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Set up JDK version
         uses: actions/setup-java@v4

.github/workflows/release_upload_play_store.yml

@@ -34,7 +34,7 @@ jobs:
         with:
           submodules: recursive
           token: ${{ secrets.GT_DAXMOBILE }}
-          ref: ${{ github.event.inputs.ref }}
+          ref: ${{ inputs.ref }}
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v5