fix(ci): draft release flow + Windows zip + always publish

- GoReleaser creates draft release (SAP-samples org locks published ones)
- Signing workflow publishes release as final step (always runs)
- Use 7z instead of zip on Windows runners (zip not in PATH)
- Force Scoop/Homebrew manifest commits even for draft releases
- Remove success-only guard on signing (ensures publish step always runs)

Author: jung-thomas

.github/workflows/release-tray.yml

@@ -77,7 +77,7 @@ jobs:
         run: |
           ASSET="sap-devs-tray_${VERSION}_${{ matrix.goos }}_${{ matrix.goarch }}"
           if [ "${{ matrix.goos }}" = "windows" ]; then
-            zip "${ASSET}.zip" -j cmd/sap-devs-tray/sap-devs-tray.exe
+            7z a "${ASSET}.zip" ./cmd/sap-devs-tray/sap-devs-tray.exe
           else
             tar czf "${ASSET}.tar.gz" -C cmd/sap-devs-tray sap-devs-tray
           fi

.github/workflows/sign-windows.yml

@@ -11,7 +11,6 @@ permissions:
 jobs:
   sign:
     runs-on: ubuntu-latest
-    if: github.event.workflow_run.conclusion == 'success'
     outputs:
       signed: ${{ steps.result.outputs.signed }}
     steps:
@@ -177,3 +176,8 @@ jobs:
             echo "::warning::Signing incomplete — release ships with unsigned binaries"
             echo "::warning::Download: ${{ steps.download.outcome }}, Extract: ${{ steps.extract.outcome }}, Sign: ${{ steps.sign.outcome }}, Repackage: ${{ steps.repackage.outcome }}, Upload: ${{ steps.upload.outcome }}, Scoop: ${{ steps.scoop-manifest.outcome }}"
           fi
+
+      - name: Publish release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh release edit "$TAG" --draft=false

.goreleaser.yml

@@ -6,6 +6,7 @@ release:
   github:
     owner: SAP-samples
     name: sap-devs-cli
+  draft: true
 
 builds:
   - main: .
@@ -51,6 +52,7 @@ changelog:
 
 scoops:
   - ids: [archives]
+    skip_upload: "false"
     repository:
       owner: SAP-samples
       name: sap-devs-cli
@@ -63,6 +65,7 @@ scoops:
 
 homebrew_casks:
   - ids: [archives]
+    skip_upload: "false"
     repository:
       owner: SAP-samples
       name: sap-devs-cli