fix(release): preserve annotated tag during checkout

[ygsgdbd]

Summary

• restore the remote annotated tag object after actions/checkout rewrites the local tag ref to the peeled commit
• require that restore step to run before release-tag validation

Root cause

The v0.10.0 tag is annotated on GitHub, but release run 33594391034 showed actions/checkout@v4 fetching the peeled commit into refs/tags/v0.10.0. The subsequent git cat-file -t therefore reported commit and stopped the release before any artifact or GitHub Release was created.

Verification

• reproduced the checkout ref overwrite in an isolated temporary repository (tag -> commit)
• verified the restore fetch changes it back to tag while v0.10.0^{} remains 1de88bc6d5a74598d27c2e1cf6830b248a3c0a0a
• rtk just check (SwiftFormat, 131 XCTest, release-script tests)
• rtk actionlint .github/workflows/*.yml
• rtk git diff --check

Release recovery

No v0.10.0 GitHub Release exists. After this PR is green and merged, the failed release will require a deliberate tag recovery because rerunning the old workflow would use the workflow definition from the original tag commit.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.