security: Fix timing attack vulnerability in credential comparison (#1014)

Co-authored-by: Copilot AI <copilot@github.com>

.github/workflows/helm-package.yml

@@ -6,11 +6,16 @@ on:
     types: [completed]
 
 env:
-  new_version: ${{ github.ref_name }}
+  new_version: ${{ github.event.workflow_run.head_branch }}
 
 jobs:
   build-helm-package:
     runs-on: ubuntu-latest
+    # Only run on successful builds triggered by tag pushes (version format: x.y.z or x.y.z-suffix)
+    if: |
+      github.event.workflow_run.conclusion == 'success' && 
+      github.event.workflow_run.event == 'push' &&
+      contains(github.event.workflow_run.head_branch, '.')
 
     steps:
       - name: Checkout helm chart repo