SK-3023 use [AUTOMATED] head-commit guard instead of [skip ci] (v3 release)

Replaces the [skip ci] approach with a scoped guard on internal-release.yml
so the PAT-authored version bump can't re-trigger the release, WITHOUT
globally skipping CI (PR checks run again).

- internal-release.yml: add `if: !contains(head_commit.message, '[AUTOMATED]')`
- shared-build-and-deploy.yml: drop the ` [skip ci]` suffix from the bump commit

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Devesh-Skyflow

.github/workflows/internal-release.yml

@@ -12,6 +12,10 @@ on:
 
 jobs:
   build-and-deploy-v3:
+    # Skip the automated version-bump commit so it can't re-trigger this workflow.
+    # The bump is pushed with a PAT (which, unlike GITHUB_TOKEN, DOES trigger workflows),
+    # so without this guard the release loops: bump -> push -> release -> bump -> ...
+    if: ${{ !contains(github.event.head_commit.message, '[AUTOMATED]') }}
     uses: ./.github/workflows/shared-build-and-deploy.yml
     with:
       ref: ${{ github.ref_name }}

.github/workflows/shared-build-and-deploy.yml

@@ -118,10 +118,11 @@ jobs:
 
           git add v3/pom.xml
           if [[ "${{ inputs.tag }}" == "internal" ]]; then
-            # [skip ci]: the version-bump push uses a PAT (see checkout above), and PAT-authored
-            # pushes DO trigger workflows (unlike GITHUB_TOKEN). Without this marker the push
-            # re-triggers this same internal-release workflow -> bump -> push -> infinite loop.
-            git commit -m "[AUTOMATED] Private Release ${{ steps.previoustag.outputs.tag }}-dev-$(git rev-parse --short $GITHUB_SHA) [skip ci]"
+            # The '[AUTOMATED]' marker is what stops the release loop: internal-release.yml
+            # skips any push whose head commit contains it (the bump is pushed with a PAT,
+            # which — unlike GITHUB_TOKEN — DOES trigger workflows). Keep the marker in sync
+            # with that guard. This keeps PR CI intact (no global [skip ci]).
+            git commit -m "[AUTOMATED] Private Release ${{ steps.previoustag.outputs.tag }}-dev-$(git rev-parse --short $GITHUB_SHA)"
             git push origin ${{ github.ref_name }} -f
           fi
           if [[ "${{ inputs.tag }}" == "beta" || "${{ inputs.tag }}" == "public" ]]; then