Reference the release checks by the repository's own syntax (#320)

`uses: ./.github/workflows/ci.yml` and `uses: $/.github/workflows/ci.yml` both call the reusable CI workflow from the caller's own commit, but only the second says so: the relative form is the same spelling a path on disk takes, and GitHub resolves it against the repository rather than the checkout. zizmor 0.6.3 added the audit that flags it.

Author: davidmckayv

.github/workflows/publish-release.yml

@@ -100,7 +100,7 @@ jobs:
   checks:
     needs: [metadata, verify]
     if: needs.metadata.outputs.is_release == 'true'
-    uses: ./.github/workflows/ci.yml
+    uses: $/.github/workflows/ci.yml
     permissions:
       contents: read