ci(release): Switch from action-prepare-release to Craft (#5014)

* ci(release): Switch from action-prepare-release to Craft

This PR migrates from the deprecated action-prepare-release to the new
Craft GitHub Actions (reusable workflow or composite action).

Changes:
- Migrate .github/workflows/release.yml to Craft reusable workflow

* ci(release): Restore GitHub App token authentication

The previous migration incorrectly removed the GitHub App token
authentication step. This commit restores it by switching to the
composite action pattern which preserves the auth flow.

* fix: Pin actions to SHA and add permissions blocks

* fix: Use correct action version SHAs (restore original versions)

* fix: Clean up action version comments

* Update Craft SHA to 1c58bfd57bfd6a967b6f3fc92bead2c42ee698ce

* Add explicit permissions block to agp-matrix.yml

* Add explicit permissions block to enforce-license-compliance.yml

* Add explicit permissions block to generate-javadocs.yml

* Add explicit permissions block to integration-tests-benchmarks.yml

* Add explicit permissions block to integration-tests-ui-critical.yml

* Add explicit permissions block to integration-tests-ui.yml

* Revert permissions changes to agp-matrix.yml

* Revert permissions changes to enforce-license-compliance.yml

* Revert permissions changes to generate-javadocs.yml

* Revert permissions changes to integration-tests-benchmarks.yml

* Revert permissions changes to integration-tests-ui-critical.yml

* Revert permissions changes to integration-tests-ui.yml

* fix: revert extraneous changes to non-release workflow files

* fix: clean up release.yml formatting and version comments

* build(craft): Update Craft action to c6e2f04

* chore: add unlabeled trigger to changelog-preview

---------

Co-authored-by: Roman Zavarnitsyn <rom4ek93@gmail.com>

Author: BYK

.github/workflows/changelog-preview.yml

@@ -0,0 +1,18 @@
+name: Changelog Preview
+on:
+  pull_request:
+    types:
+    - opened
+    - synchronize
+    - reopened
+    - edited
+    - labeled
+    - unlabeled
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  changelog-preview:
+    uses: getsentry/craft/.github/workflows/changelog-preview.yml@v2
+    secrets: inherit

.github/workflows/release.yml

@@ -3,15 +3,19 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: Version to release
-        required: true
+        description: Version to release (or "auto")
+        required: false
       force:
         description: Force a release even when there are release-blockers (optional)
         required: false
       merge_target:
         description: Target branch to merge into. Uses the default branch as a fallback (optional)
         required: false
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -30,7 +34,7 @@ jobs:
           fetch-depth: 0
           submodules: 'recursive'
       - name: Prepare release
-        uses: getsentry/action-prepare-release@v1
+        uses: getsentry/craft@c6e2f04939b6ee67030588afbb5af76b127d8203 # v2
         env:
           GITHUB_TOKEN: ${{ steps.token.outputs.token }}
         with: