fix(workflows): address Copilot review round 9 comments

- shared-release: append '|| true' to grep pipeline in command
  substitution so pipefail does not swallow the explicit parse-error
  message when VERSION is not found
- shared-go-build: add early Validate inputs step that rejects
  push=true with docker-build=false to prevent unnecessary
  packages:write token scope being granted without Docker steps running

Signed-off-by: I313226 <onur.yilmaz@sap.com>

Author: onuryilmaz

.github/workflows/shared-go-build.yaml

@@ -56,6 +56,13 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
+      - name: Validate inputs
+        run: |
+          if [ "${{ inputs.push }}" = "true" ] && [ "${{ inputs.docker-build }}" != "true" ]; then
+            echo "ERROR: push=true requires docker-build=true"
+            exit 1
+          fi
+
       - name: Set up Go
         uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:

.github/workflows/shared-release.yaml

@@ -86,7 +86,7 @@ jobs:
       - name: Compute new version
         id: version
         run: |
-          CURRENT_VERSION=$(grep -E '^VERSION[[:space:]]*[:?]?=' "${{ inputs.makefile-path }}" | head -1 | sed 's/.*=[[:space:]]*//' | tr -d '[:space:]')
+          CURRENT_VERSION=$(grep -E '^VERSION[[:space:]]*[:?]?=' "${{ inputs.makefile-path }}" | head -1 | sed 's/.*=[[:space:]]*//' | tr -d '[:space:]' || true)
           echo "Current version: $CURRENT_VERSION"
 
           if ! echo "$CURRENT_VERSION" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+$'; then