chore(ci): standardize release workflow with skill+plugin packages

- Pin all actions to SHA (harden-runner v2.14.2, checkout v6.0.2, gh-release v2.5.0)
- Add step-security/harden-runner for supply chain security
- Split into separate skill and plugin release assets
- Produce both zip and tar.gz formats

Author: CybotTM

.github/workflows/release.yml

@@ -15,39 +15,59 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Get version from tag
         id: version
-        run: echo "version=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
+        run: echo "version=${{GITHUB_REF#refs/tags/}}" >> $GITHUB_OUTPUT
 
-      - name: Create skill package
+      - name: Create netresearch-branding skill package
         run: |
-          mkdir -p dist
-          # Copy skill files from new structure
-          cp skills/netresearch-branding/SKILL.md dist/
-          cp LICENSE dist/
-          [ -d "skills/netresearch-branding/references" ] && cp -r skills/netresearch-branding/references dist/
-          [ -d "skills/netresearch-branding/scripts" ] && cp -r skills/netresearch-branding/scripts dist/
-          [ -d "skills/netresearch-branding/assets" ] && cp -r skills/netresearch-branding/assets dist/
-          [ -d "skills/netresearch-branding/templates" ] && cp -r skills/netresearch-branding/templates dist/
+          mkdir -p dist-skill
+          cp skills/netresearch-branding/SKILL.md dist-skill/
+          cp LICENSE dist-skill/
+          [ -d "skills/netresearch-branding/references" ] && cp -r skills/netresearch-branding/references dist-skill/
+          [ -d "skills/netresearch-branding/scripts" ] && cp -r skills/netresearch-branding/scripts dist-skill/
+          [ -d "skills/netresearch-branding/assets" ] && cp -r skills/netresearch-branding/assets dist-skill/
+          [ -d "skills/netresearch-branding/templates" ] && cp -r skills/netresearch-branding/templates dist-skill/
+          [ -d "skills/netresearch-branding/examples" ] && cp -r skills/netresearch-branding/examples dist-skill/
+          [ -f "skills/netresearch-branding/checkpoints.yaml" ] && cp skills/netresearch-branding/checkpoints.yaml dist-skill/
+          cd dist-skill
+          zip -r ../netresearch-branding-skill-${{ steps.version.outputs.version }}.zip .
+          tar -czvf ../netresearch-branding-skill-${{ steps.version.outputs.version }}.tar.gz .
+
+      - name: Create netresearch-branding plugin package
+        run: |
+          mkdir -p dist-plugin
+          # Include netresearch-branding skill files
+          mkdir -p dist-plugin/skills/netresearch-branding
+          cp skills/netresearch-branding/SKILL.md dist-plugin/skills/netresearch-branding/
+          [ -d "skills/netresearch-branding/references" ] && cp -r skills/netresearch-branding/references dist-plugin/skills/netresearch-branding/
+          [ -d "skills/netresearch-branding/scripts" ] && cp -r skills/netresearch-branding/scripts dist-plugin/skills/netresearch-branding/
+          [ -d "skills/netresearch-branding/assets" ] && cp -r skills/netresearch-branding/assets dist-plugin/skills/netresearch-branding/
+          [ -d "skills/netresearch-branding/templates" ] && cp -r skills/netresearch-branding/templates dist-plugin/skills/netresearch-branding/
+          [ -d "skills/netresearch-branding/examples" ] && cp -r skills/netresearch-branding/examples dist-plugin/skills/netresearch-branding/
+          [ -f "skills/netresearch-branding/checkpoints.yaml" ] && cp skills/netresearch-branding/checkpoints.yaml dist-plugin/skills/netresearch-branding/
+          cp LICENSE dist-plugin/
           # Include plugin manifest
-          [ -d ".claude-plugin" ] && cp -r .claude-plugin dist/
-          cd dist
-          zip -r ../netresearch-branding-${{ steps.version.outputs.version }}.zip .
-          tar -czvf ../netresearch-branding-${{ steps.version.outputs.version }}.tar.gz .
+          [ -d ".claude-plugin" ] && cp -r .claude-plugin dist-plugin/
+          cd dist-plugin
+          zip -r ../netresearch-branding-plugin-${{ steps.version.outputs.version }}.zip .
+          tar -czvf ../netresearch-branding-plugin-${{ steps.version.outputs.version }}.tar.gz .
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
         with:
           files: |
-            netresearch-branding-${{ steps.version.outputs.version }}.zip
-            netresearch-branding-${{ steps.version.outputs.version }}.tar.gz
+            netresearch-branding-skill-${{ steps.version.outputs.version }}.zip
+            netresearch-branding-skill-${{ steps.version.outputs.version }}.tar.gz
+            netresearch-branding-plugin-${{ steps.version.outputs.version }}.zip
+            netresearch-branding-plugin-${{ steps.version.outputs.version }}.tar.gz
           generate_release_notes: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}