gh-release-chart: asset upload tag mismatch + silently empty air-gapped image list

[kedifybot]

Two defects in the manual Helm Publish path (gh-release-chart.yml), both found while republishing kedify-agent/v0.6.8:

1. Release tag mismatch: the Upload image digest asset step uploads to ${{ steps.push_tag.outputs.new_tag }} = kedify-agent-v0.6.8 (hyphen, from the tag-push step), but releases created by the milestones tracker use the kedify-agent/v0.6.8 (slash) tag — so the upload fails with release not found whenever the release came from the tracker path (run 30641426529). The chart publish itself succeeds; only the asset step dies.

2. Silently empty generated-images.json: the kedify-agent/v0.6.7 release asset contains "images": [] — the air-gapped image list generation produced an empty list in CI without failing the run. Regenerating locally for v0.6.8 (helm deps built + yq present) yields 30 pinned images, uploaded manually. Likely print-image-names.sh failing/short-circuiting silently in the CI environment; it should hard-fail on an empty result.

Longer term both paths (tracker vs manual) duplicating release logic is the root issue — consolidating them is probably part of the broader release-automation work.

[kedifybot]

Third defect from the same run, worst of the three: the manual workflow's publish step uses stefanprodan/helm-gh-pages with charts_dir: "." — it packages and publishes every chart in the repo, not just the selected one. Run 30641426529 (dispatched for kedify-agent only) repackaged keda-v2.20.2-0, kedify-proxy-v0.0.12 and external-scaler-azure-cosmos-db-0.1.0 under unchanged versions (digest churn; cosmos-db even with different content) and published the never-released keda-add-ons-http-0.15.0 (upstream version — kedify intentionally ships vX.Y.Z-N builds only) and kedify-observability-0.0.4 (OCI-only chart).

Cleaned up in gh-pages commit 0b372e7: all overwritten artifacts restored to pre-incident bytes (digests verified), stray charts removed, only the intended kedify-agent v0.6.8 republish kept. The tracker path already uses wozniakjan/helm-gh-pages@single_chart_path — the manual workflow should too.