fix: ensure release runs full test+coverage gate before packaging, use GH_TOKEN for tag push

Made-with: Cursor

Author: Hongwei-MB

.github/workflows/create-tag.yml

@@ -10,7 +10,6 @@ on:
 
 permissions:
   contents: write
-  actions: write
 
 jobs:
   tag:
@@ -20,6 +19,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ secrets.GH_TOKEN }}
 
       - name: Determine version
         id: version
@@ -46,8 +46,3 @@ jobs:
         run: |
           git tag ${{ steps.version.outputs.tag }}
           git push origin ${{ steps.version.outputs.tag }}
-
-      - name: Trigger release workflow
-        run: gh workflow run release.yml -f tag=${{ steps.version.outputs.tag }}
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -48,27 +48,9 @@ jobs:
       - name: Restore tools
         run: dotnet tool restore
 
-      - name: Publish
+      - name: Test + Build + Pack
         shell: pwsh
-        run: |
-          dotnet publish src/LiveLingo.App/LiveLingo.App.csproj `
-            -c Release `
-            -r win-x64 `
-            --self-contained `
-            -o publish/win-x64 `
-            --nologo
-
-      - name: Pack (Velopack)
-        shell: pwsh
-        env:
-          DOTNET_ROLL_FORWARD: LatestMajor
-        run: |
-          dotnet vpk pack `
-            --packId LiveLingo `
-            --packVersion ${{ steps.meta.outputs.version }} `
-            --packDir publish/win-x64 `
-            --mainExe LiveLingo.App.exe `
-            --outputDir releases
+        run: ./build.ps1 Pack --Version ${{ steps.meta.outputs.version }}
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2