use dd-octo-sts for tag creation

[IlyasShabi]

What does this PR do?:
Use dd-octo-sts for tag creation and protection

Motivation:

This is are request from SDLC security team for tag creation and protection for a release

PROF-14039

[github-actions]

Overall package size

Self size: 2.03 MB
Deduped: 2.39 MB
No deduping: 2.39 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | source-map | 0.7.6 | 185.63 kB | 185.63 kB | | pprof-format | 2.2.1 | 163.06 kB | 163.06 kB | | node-gyp-build | 3.9.0 | 8.81 kB | 8.81 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-03-17 11:16:08

Comparing candidate commit caa8ac7 in PR branch ishabi/dd-octo-sts with baseline commit 6ab3e39 in branch main.

Found 1 performance improvements and 0 performance regressions! Performance is the same for 91 metrics, 28 unstable metrics.

scenario:profiler-idle-with-wall-profiler-22

• 🟩 cpu_user_time [-8.014ms; -1.332ms] or [-11.237%; -1.868%]

[xopham]

lgtm. A minor proposal how to make this a bit leaner :)

[xopham]

lgtm

[xopham]

one comment, otherwise fine

[xopham]

I am not certain if the below works with v6, but you could downgrade to version 4:

Suggested change

	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd#v6.0.2
	- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5#v4.3.1