fix: CI, release pipeline fixes from 8.2-rc.1 (#12561)

* fix(ci): disable docker release jobs like in 8.1

The docker-build/manifest/readme jobs were enabled in 8.2 and wired into
create-github-release/audit-release. They fail at docker/login-action
("Username and password required") because DockerHub credentials are not
available, which cascades and cancels the whole release.

Restore the 8.1 behavior: re-add `if: false` to the docker jobs and unwire
them from the downstream release jobs.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(ci): reinstall web deps in license-check job

Excluding web from the generated-code artifact (#12557, to avoid OOM on
upload) also dropped web/node_modules, which provides the
license-checker-rseidelsohn binary used by `make ci-node-check-licenses`.
The job failed with "license-checker-rseidelsohn: not found".

Run `pnpm install` in web before the license check so its node_modules is
present again.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Roman Perekhod <2403905@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: 3 people

.github/workflows/release.yml

@@ -113,6 +113,7 @@ jobs:
           retention-days: 1
 
   docker-build:
+    if: false
     name: docker-build (${{ matrix.arch }}, ${{ matrix.repo }})
     runs-on: ${{ matrix.arch == 'amd64' && 'ubuntu-24.04' || 'ubuntu-24.04-arm' }}
     needs: [determine-release-type, generate-code, security-scan-trivy]
@@ -218,6 +219,7 @@ jobs:
           exit 1
 
   docker-manifest:
+    if: false
     name: docker-manifest (${{ matrix.repo }})
     runs-on: ubuntu-latest
     needs: [determine-release-type, docker-build, docker-scan]
@@ -243,6 +245,7 @@ jobs:
             "${{ matrix.repo }}:${{ needs.determine-release-type.outputs.version }}-linux-arm64"
 
   docker-readme:
+    if: false
     name: docker-readme (${{ matrix.repo }})
     runs-on: ubuntu-latest
     needs: [determine-release-type, docker-manifest]
@@ -314,6 +317,10 @@ jobs:
         with:
           go-version-file: go.mod
       - run: npm install --silent -g yarn npx "pnpm@$PNPM_VERSION" --force
+      # web is excluded from the generated-code artifact (see generate-code) to
+      # avoid OOM on upload, so its node_modules — which provides the
+      # license-checker-rseidelsohn binary — must be reinstalled here.
+      - run: cd web && pnpm install
       - run: make ci-node-check-licenses && make ci-node-save-licenses
       - run: make ci-go-check-licenses && make ci-go-save-licenses
       - run: tar -czf third-party-licenses.tar.gz -C third-party-licenses .
@@ -348,7 +355,7 @@ jobs:
 
   create-github-release:
     runs-on: ubuntu-latest
-    needs: [determine-release-type, build-binaries, license-check, generate-changelog, security-scan-trivy, docker-readme]
+    needs: [determine-release-type, build-binaries, license-check, generate-changelog, security-scan-trivy]
     steps:
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
@@ -379,10 +386,6 @@ jobs:
     needs:
       - determine-release-type
       - generate-code
-      - docker-build
-      - docker-scan
-      - docker-manifest
-      - docker-readme
       - build-binaries
       - security-scan-trivy
       - license-check
@@ -406,7 +409,7 @@ jobs:
           python3 scripts/audit-release.py \
             --version "${{ needs.determine-release-type.outputs.version }}" \
             --dir release-assets/ \
-            --github-release --docker
+            --github-release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}