ci(release): replace cargo-release+gitmoji-changelog with release-plz

  Removes BOM generation (stale, unused) and gitmoji-changelog. Replaces
  cargo-release with release-plz + git-cliff for version bumps,
  CHANGELOG updates, and crates.io publishing.

  Merges binary build and krew-update jobs into release-plz.yaml as
  conditional jobs (releases_created == true) to avoid the  GITHUB_TOKEN
  cross-workflow trigger restriction — no PAT required.

  Existing tag format (no v-prefix) preserved via git_tag_name.

Author: davidB

.github/workflows/release-plz.yaml

@@ -0,0 +1,95 @@
+name: release-plz
+on:
+  push:
+    branches: [master]
+
+jobs:
+  release-pr:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: release-plz/action@v0.5
+        with:
+          command: release-pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    outputs:
+      releases_created: ${{ steps.release-plz.outputs.releases_created }}
+      tag: ${{ steps.tag.outputs.value }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: dtolnay/rust-toolchain@stable
+      - id: release-plz
+        uses: release-plz/action@v0.5
+        with:
+          command: release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+      - id: tag
+        if: steps.release-plz.outputs.releases_created == 'true'
+        env:
+          RELEASES: ${{ steps.release-plz.outputs.releases }}
+        run: echo "value=$(echo "$RELEASES" | jq -r '.[0].tag')" >> $GITHUB_OUTPUT
+
+  build:
+    needs: release
+    if: needs.release.outputs.releases_created == 'true'
+    runs-on: ${{ matrix.os.imageName }}
+    permissions:
+      contents: write
+    env:
+      SCCACHE_GHA_ENABLED: "true"
+      RUSTC_WRAPPER: "sccache"
+    strategy:
+      matrix:
+        os:
+          - { target_platform: x86_64-unknown-linux-gnu,  imageName: ubuntu-latest, cross: "true" }
+          - { target_platform: x86_64-unknown-linux-musl, imageName: ubuntu-latest, cross: "true" }
+          - { target_platform: aarch64-unknown-linux-musl, imageName: ubuntu-latest, cross: "true" }
+          - { target_platform: x86_64-apple-darwin,  imageName: macOS-latest }
+          - { target_platform: aarch64-apple-darwin, imageName: macOS-latest }
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.release.outputs.tag }}
+      - uses: mozilla-actions/sccache-action@v0.0.10
+      - uses: jdx/mise-action@v4
+      - id: zip-release-ci-flow
+        run: mise run zip-release-ci-flow
+        env:
+          TARGET: ${{ matrix.os.target_platform }}
+          CROSS: ${{ matrix.os.cross }}
+      - uses: svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: ${{ steps.zip-release-ci-flow.outputs.dist_file_path }}
+          tag: ${{ steps.zip-release-ci-flow.outputs.dist_version }}
+          prerelease: false
+          overwrite: true
+      - run: ${SCCACHE_PATH} --show-stats
+        shell: bash
+
+  krew-update:
+    needs: [release, build]
+    if: needs.release.outputs.releases_created == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.release.outputs.tag }}
+      - uses: rajatjindal/krew-release-bot@v0.0.51

.github/workflows/release.yaml

@@ -16,6 +16,8 @@ kind = "0.20"
 rust = { version = "1.96.0", profile = "minimal", components = "cargo,rustfmt,clippy" }  # the rust tool stack (with cargo, fmt, clippy) to build source
 jq = "latest"
 "cargo:cross" = "latest"
+"github:release-plz/release-plz" = "latest"
+"github:orhun/git-cliff" = "latest"
 
 [tasks.clean]
 description = "Clean build artifacts"
@@ -103,42 +105,10 @@ if [ -n "$GITHUB_OUTPUT" ]; then
 fi
 """
 
-# Documentation tasks
-[tasks.update-changelog]
-description = "Update changelog using gitmoji-changelog"
-run = """
-if ! command -v gitmoji-changelog &> /dev/null; then
-    echo "Installing gitmoji-changelog..."
-    cargo install gitmoji-changelog
-fi
-rm -rf CHANGELOG.md
-gitmoji-changelog -r x.y.z-dev -o CHANGELOG.md .
-"""
-
-[tasks.update-bom]
-description = "Update Bill of Materials"
-run = """
-if ! cargo bom --help &> /dev/null; then
-    echo "Installing cargo-bom..."
-    cargo install cargo-bom
-fi
-cargo bom > BOM.txt
-"""
-
-[tasks.update-docs]
-description = "Update all documentation"
-depends = ["update-changelog", "update-bom"]
-
-[tasks.publish]
-description = "Publish to crates.io"
-# depends = ["update-docs"]
-run = """
-if ! command -v cargo-release &> /dev/null; then
-    echo "Installing cargo-release..."
-    cargo install cargo-release
-fi
-cargo release --execute {{option(name="level", default="minor")}}
-"""
+# Release tasks
+[tasks.release-pr]
+description = "Create/update release PR via release-plz"
+run = "release-plz update"
 
 # Debug task
 [tasks.debug]