ci: dispatch checks for release pull requests

[jerome-benoit]

PR Checklist

• Title follows Conventional Commits.
• Restores automatic required checks without a custom token.
• Preserves SonarCloud pull-request analysis on dispatched runs.
• Uses least-privilege job permissions.
• Validated workflow structure and formatting.

Does this PR introduce a breaking change?

• Yes
• No

Problem

Resources created with the default GITHUB_TOKEN do not emit recursive workflow runs. A plain dispatch can run CI on the release branch, but workflow_dispatch has no native pull-request event context for SonarCloud.

Changes

• enable workflow_dispatch with required string inputs for PR number, head ref, and base ref
• grant the Release Please job actions: write plus the documented release permissions
• extract the three values once from the Release Please PR output
• dispatch CI with explicit --repo, the release PR head ref, and string-safe --raw-field inputs
• provide conditional sonar.pullrequest.key, sonar.pullrequest.branch, and sonar.pullrequest.base arguments on dispatched runs

Verification

• parsed both workflows and asserted the shared dispatch contract, permissions, and conditional Sonar arguments
• exercised extraction of PR chore(master): release 0.6.4 #144 metadata from the Release Please output shape
• verified explicit GitHub CLI repository resolution
• deno task format:check
• git diff --check

The flow uses the default short-lived token and does not reintroduce a PAT or repository token secret.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5b868c22d1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud