Fix release condition with explicit check job

- Add check_release job to properly evaluate [release] condition
- Use bash string matching instead of GitHub expressions
- Make release job depend on both build success and release check
- This prevents unintended releases when [release] is not in commit message

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>

Author: pditommaso

.github/workflows/main.yml

@@ -12,9 +12,24 @@ jobs:
   build:
     uses: ./.github/workflows/build.yml
 
-  release:
+  check_release:
     needs: build
-    if: github.ref == 'refs/heads/master' && contains(join(github.event.commits.*.message, ' '), '[release]')
+    runs-on: ubuntu-latest
+    outputs:
+      should_release: ${{ steps.check.outputs.should_release }}
+    steps:
+      - name: Check if release is needed
+        id: check
+        run: |
+          if [[ "${{ github.ref }}" == "refs/heads/master" ]] && [[ "${{ github.event.head_commit.message }}" == *"[release]"* ]]; then
+            echo "should_release=true" >> $GITHUB_OUTPUT
+          else
+            echo "should_release=false" >> $GITHUB_OUTPUT
+          fi
+
+  release:
+    needs: [build, check_release]
+    if: needs.check_release.outputs.should_release == 'true'
     uses: ./.github/workflows/release.yml
     with:
       should_release: true