ci: release fixes; add flag to always run full CI during release (#10066)

* Allow skipping lfx for 1.6.1 release

* just remove all lfx for now

* validate deps step

* Make docker builds dependent on CI success

* Wrap release conditionals correctly in {{ }}

* just wrap all conditionals

* Try removing the if in CI job?

* Always run all tests on release

* Try simplifying the runs-on

* Pass ref correctly in ci for testing

* correct input name

* skip lfx tests

* Fail if version is already published

* Fix nightly docker tags

* update node version to 22

* Fix runners

* Fix comm to get version from uv tree

* Add dry run mode

* That is hilarious. Github only allows 10 inputs

* Fix getting version for base manifest

* Add provenance to ensure attestation manifest is not created with platform tag

* Fix nightly version extraction and attestaion manifest

* Use better version extraction snippet

* Fix repo name for nightly-all

* Add back lfx steps

* reduce github inputs to 10 by making docker-ep dependent on main

* Add warning that lfx is not impl yet