ci(release): gate release-trigger on the release environment

[dkirov-dd]

Summary

• Add environment: release to the dispatch job in release-trigger.yml so GitHub's deployment protection runs before the reusable release-dispatch.yml workflow starts — the prepare step (which creates tags) now requires manual approval
• Remove the inner environment: release from release-dispatch.yml's dispatch job; a single gate at the trigger level is sufficient

Problem

The prepare job in release-dispatch.yml creates git tags before reaching the environment: release gate on the inner dispatch job, so tags could be created without a manual approval step.

Test plan

• Trigger a push to master that touches a CHANGELOG to confirm the deployment approval gate fires before any tags are created

[dd-octo-sts]

⚠️ Recommendation: Add qa/skip-qa label

This PR does not modify any files shipped with the agent.

To help streamline the release process, please consider adding the qa/skip-qa label if these changes do not require QA testing.

[dd-octo-sts]

Validation Report

All 20 validations passed.

Show details

Validation	Description	Status
agent-reqs	Verify check versions match the Agent requirements file	✅
ci	Validate CI configuration and Codecov settings	✅
codeowners	Validate every integration has a CODEOWNERS entry	✅
config	Validate default configuration files against spec.yaml	✅
dep	Verify dependency pins are consistent and Agent-compatible	✅
http	Validate integrations use the HTTP wrapper correctly	✅
imports	Validate check imports do not use deprecated modules	✅
integration-style	Validate check code style conventions	✅
jmx-metrics	Validate JMX metrics definition files and config	✅
labeler	Validate PR labeler config matches integration directories	✅
legacy-signature	Validate no integration uses the legacy Agent check signature	✅
license-headers	Validate Python files have proper license headers	✅
licenses	Validate third-party license attribution list	✅
metadata	Validate metadata.csv metric definitions	✅
models	Validate configuration data models match spec.yaml	✅
openmetrics	Validate OpenMetrics integrations disable the metric limit	✅
package	Validate Python package metadata and naming	✅
readmes	Validate README files have required sections	✅
saved-views	Validate saved view JSON file structure and fields	✅
version	Validate version consistency between package and changelog	✅

View full run