Enable pytorch ecosystem libraries promotion to prod (#7259)

This should allow promotion of ecosystem library from /test/ channel to
/prod/
Plan is to allow only certain people to run this workflow.

When triggering the workflow the verison update need to be landed
before:

https://github.com/pytorch/test-infra/blob/main/release/release_versions.sh

First run of the workflow needs to be DRY_RUN.
Second run is the promotion

Example of successful run:

https://github.com/pytorch/test-infra/actions/runs/18144952405/job/51644528583

Author: atalman

.github/workflows/release-download-pytorch-org.yml

@@ -0,0 +1,82 @@
+name: Release ecosystem library from test to production.
+
+on:
+  workflow_dispatch:
+    inputs:
+      dryrun:
+        required: true
+        type: choice
+        default: enabled
+        options:
+          - enabled
+          - disabled
+      package:
+        description: "Domain to prepare and release"
+        required: true
+        type: choice
+        default: torchvision
+        options:
+          - torchao
+          - torchtune
+          - executorch
+          - torchvision
+          - torchaudio
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  trigger:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    environment: promote-env
+    container:
+      image: pytorch/almalinux-builder:cpu
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Configure aws credentials (pytorch account)
+        uses: aws-actions/configure-aws-credentials@50ac8dd1e1b10d09dac7b8727528b91bed831ac0 # v3.0.2
+        with:
+          role-to-assume: arn:aws:iam::749337293305:role/gha_workflow_promote_wheels
+          aws-region: us-east-1
+      - name: Promote library to download.pytorch.org
+        shell: bash
+        env:
+          PACKAGE: ${{ inputs.package || 'torchvision' }}
+          DRY_RUN: ${{ inputs.dryrun || 'enabled' }}
+        run: |
+            set -ex
+            cd release
+            # Install requirements
+            pip install awscli==1.32.18
+
+            promote_s3() {
+              local package_name
+              package_name=$1
+              local package_type
+              package_type=$2
+              local promote_version
+              promote_version=$3
+
+              # shellcheck disable=SC2086
+              echo "=-=-=-= Promoting ${package_name}'s v${promote_version} ${package_type} packages' =-=-=-="
+              (
+                  set -x
+                  # shellcheck disable=SC2086
+                  TEST_PYTORCH_PROMOTE_VERSION="${promote_version}" \
+                      PACKAGE_NAME="${package_name}" \
+                      PACKAGE_TYPE="${package_type}" \
+                      TEST_WITHOUT_GIT_TAG=1 \
+                      DRY_RUN="${DRY_RUN}" ./promote/s3_to_s3.sh
+              )
+              echo
+            }
+
+            # Init release versions variables
+            source ./release_versions.sh
+            # Run promotion
+            # shellcheck disable=SC2086
+            version="${PACKAGE^^}_VERSION"
+            # shellcheck disable=SC2086
+            promote_s3 ${PACKAGE} whl "${!version}"