Improve release workflow reliability with auth, retry logic, and marker update fix

[vakesz]

Summary

This PR fixes issues in the release pipeline:

1. Add GitHub token authentication to API requests - Prevents rate limiting from unauthenticated GitHub API calls

2. Move release marker update to end of build workflow - Previously, .current-release was updated in check_release.yml before the build ran. If the build failed, the marker was already updated, so retries wouldn't trigger. Now the marker is only updated after a successful build.

3. Add retry logic for git push - If main branch moves forward during the build, the push will retry with rebase to handle race conditions.

4. Downgrade release_version to last successful build.

Changes

• check_release.yml: Add GH_TOKEN auth, remove premature marker update, pass secrets to called workflow
• create_release.yml: Add GH_TOKEN auth, add release marker step at end, add push retry with rebase

Testing

These changes have been tested in a fork where releases are being built successfully: https://github.com/vakesz/Apollo