fix: keep release compatible with GitPython 3.1.60

[abrichr]

Summary

• replace the broken semantic-release container actions with the exact reviewed upstream compatibility commit
• keep GitPython 3.1.60 and its security fixes
• protect both version release and GitHub asset publication with workflow tests
• record the exit condition: return to published actions after upstream ships PR #1477

Verification

• exact upstream commit installed with GitPython 3.1.60
• semantic-release version dry run selected 1.15.0
• semantic-release publish dry run passed
• actionlint passed
• 183 tests passed, 6 skipped