🐛 fix(ci): improve release workflows for prereleases (#12634)

- Use GH_TOKEN for desktop canary release upload
- Fix Docker tagging: latest only for stable, tag prerelease versions
- Skip release job when ref contains '-' (prerelease tags)

Made-with: Cursor

.github/workflows/release-desktop-canary.yml

@@ -344,7 +344,7 @@ jobs:
             release/*.rpm*
             release/*.tar.gz*
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
 
   # ============================================
   # 发布到 S3 更新服务器

.github/workflows/release-docker.yml

@@ -44,7 +44,8 @@ jobs:
           images: ${{ env.REGISTRY_IMAGE }}
           tags: |
             type=semver,pattern={{version}}
-            type=raw,value=latest
+            type=raw,value=latest,enable=${{ !github.event.release.prerelease }}
+            type=raw,value=${{ github.event.release.tag_name }},enable=${{ github.event.release.prerelease }}
 
       - name: Docker login
         uses: docker/login-action@v3
@@ -109,7 +110,8 @@ jobs:
           images: ${{ env.REGISTRY_IMAGE }}
           tags: |
             type=semver,pattern={{version}}
-            type=raw,value=latest
+            type=raw,value=latest,enable=${{ !github.event.release.prerelease }}
+            type=raw,value=${{ github.event.release.tag_name }},enable=${{ github.event.release.prerelease }}
 
       - name: Docker login
         uses: docker/login-action@v3

.github/workflows/release.yml

@@ -17,6 +17,7 @@ concurrency:
 jobs:
   release:
     name: Release
+    if: ${{ !contains(github.ref_name, '-') }}
     runs-on: ubuntu-latest
 
     services: