feat(release-tracks): preserve drafts for safe release rollback and retagging

[seansica]

Protect virtual dependencies, publish retag hashes atomically, recover interrupted updates, and validate destructive confirmation under the release lock.

Relates to mitre-attack/attack-workbench-frontend#957

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 84.19865% with 70 lines in your changes missing coverage. Please review.
✅ Project coverage is 80.45%. Comparing base (eb3711a) to head (7aca0df).
⚠️ Report is 2 commits behind head on beta.

Files with missing lines	Patch %	Lines
app/services/release-tracks/snapshot-service.js	70.42%	21 Missing ⚠️
...release-tracks/release-track-dynamic.repository.js	84.48%	18 Missing ⚠️
app/services/release-tracks/versioning-service.js	86.95%	12 Missing ⚠️
...p/services/release-tracks/virtual-track-service.js	80.39%	10 Missing ⚠️
app/controllers/release-tracks-controller.js	67.85%	9 Missing ⚠️
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff             @@
##             beta     #495      +/-   ##
==========================================
+ Coverage   80.38%   80.45%   +0.06%     
==========================================
  Files         243      243              
  Lines       38538    38911     +373     
  Branches     4661     4729      +68     
==========================================
+ Hits        30980    31304     +324     
- Misses       7471     7521      +50     
+ Partials       87       86       -1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.