chore: fix publish workflow for real

[ancheetah]

JIRA Ticket

https://pingidentity.atlassian.net/browse/SDKS-4448

Description

• add shell to steps with run
• pass in env vars to sub action
• move beta slack notifications to new webhook

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6cb0577

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 6cb0577

Command	Status	Duration	Result
nx affected -t build lint test docs e2e-ci --ve...	✅ Succeeded	<1s	View ↗
nx-cloud record -- nx format:check --verbose	✅ Succeeded	5s	View ↗

---

☁️ Nx Cloud last updated this comment at 2025-10-27 21:25:48 UTC

[ancheetah]

Successfully tested manual trigger without publishing to npm. Will try an actual beta publish after this is merged in.

Note: Playwright artifacts don't seem to be picked up but I think we have the same problem in ping-javascript-sdk