fix: race condition in goreleaser workflow

[erikburt]

Changes

• Use the github.sha rather than github.ref during goreleaser build/merges to fix race condition

Motivation

On a push event:

1. Goreleaser workflow is triggered
2. split job is done first:
   1. This builds all amd64 and arm64 images through a build matrix
3. Then the merge job is waiting for split to finish
   1. merge checks out the repo at github.ref

If there was a push to develop in between the initial dispatch and the merge starting, the expected SHA will differ, and the version check will fail.

---

RE-3215

[erikburt]

Other solution is to set a concurrency group and cancel in-progress runs if a new commit has been pushed. Thoughts?

[chainchad]

Looks good, nice find!