Fix static analysis findings

[YJack0000]

Summary

• harden the release workflow by moving workflow_dispatch inputs into environment variables before shell use
• clean up shell scripts, React accessibility findings, readonly props, nested ternaries, array keys, regex/string handling, and smaller static-analysis issues
• replace silent best-effort catches with contextual logging so failures show up in diagnostics without breaking user flows

Verification

• npm run build
• npm run test
• git diff --check

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud