ci: release fixes; add flag to always run full CI during release (#10066)

* Allow skipping lfx for 1.6.1 release

* just remove all lfx for now

* validate deps step

* Make docker builds dependent on CI success

* Wrap release conditionals correctly in {{ }}

* just wrap all conditionals

* Try removing the if in CI job?

* Always run all tests on release

* Try simplifying the runs-on

* Pass ref correctly in ci for testing

* correct input name

* skip lfx tests

* Fail if version is already published

* Fix nightly docker tags

* update node version to 22

* Fix runners

* Fix comm to get version from uv tree

* Add dry run mode

* That is hilarious. Github only allows 10 inputs

* Fix getting version for base manifest

* Add provenance to ensure attestation manifest is not created with platform tag

* Fix nightly version extraction and attestaion manifest

* Use better version extraction snippet

* Fix repo name for nightly-all

* Add back lfx steps

* reduce github inputs to 10 by making docker-ep dependent on main

* Add warning that lfx is not impl yet

.github/workflows/python_test.yml

@@ -47,7 +47,7 @@ on:
         default: ubuntu-latest
 env:
   POETRY_VERSION: "1.8.2"
-  NODE_VERSION: "21"
+  NODE_VERSION: "22"
   PYTEST_RUN_PATH: "src/backend/tests"
   OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
   ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
@@ -145,6 +145,7 @@ jobs:
           PYLEAK_LOG_LEVEL: debug # enable pyleak logging
           DO_NOT_TRACK: true # disable telemetry reporting
 
+
   lfx-tests:
     name: LFX Tests - Python ${{ matrix.python-version }}
     runs-on: ${{ (inputs['runs-on'] && startsWith(format('{0}', inputs['runs-on']), '[') && fromJSON(inputs['runs-on'])) || inputs['runs-on'] || github.event.inputs['runs-on'] || 'ubuntu-latest' }}