Track successful releases in the GitHub environment

[dkirov-dd]

Summary

• record successful wheel-build dispatches in the GitHub release environment
• run tracking only after the reusable dispatch succeeds
• skip environment tracking for dry runs and grant the tracking job no token permissions

The repository environment has no required reviewers and allows master deployments.

Verification

• actionlint passed
• static workflow contract checks passed
• git diff --check
• GitHub reports the commit signature as valid