fix(release): wait for a new draft to show in the releases list - #210

What

The first Release dry run after #208 (run 43184427067) failed in publish:

publish-ci: step create-draft
https://github.com/cloudhal-dev/cloudhal/releases/tag/untagged-aba69049c9913eca0906
publish-ci: step sync-assets
publish-ci: expected one release v0.8.0-dryrun.171, found 0

GitHub's releases list shows a just-created draft only after a few seconds. A draft whose tag is not pushed yet has no releases/tags/ URL, so the list is the only way to find it. The always() cleanup step found the draft 1.6 s later and deleted it; nothing was published, and no tag or draft is left.

createDraft in scripts/publish-ci.ts now waits until the list shows the draft, retrying after 1, 2, 4, then 8 s per try (about a minute at most), before sync-assets runs. The same delay hits a real release, whose draft is created before the tag is published, so this applies to every run, not only dry runs. The planner and driver in release-publish-plan.ts are unchanged.

The rest of the dry run passed: bundle built and attested, and bundle-sign verified the attestation and the statement and signed with the run's throwaway key.

Checklist

• pnpm check and cargo test --workspace pass locally (biome, size-check, turbo run typecheck 20/20, @cloudhal/cli release tests 39/39 incl. three new waitForDraft cases; no Rust change)
• Contract change? none
• User-visible change in a published package? none (repository script only)
• Commits are signed off (git commit -s, DCO)
• Docs / AGENTS.md updated if behaviour or commands changed (no command change)

🤖 Generated with Claude Code