Merge pull request #2615 from gh-xj/fix/release-build-blockers

fix(ci): install gh CLI for release trigger guard on self-hosted runners

.github/workflows/pub-release.yml

@@ -106,7 +106,24 @@ jobs:
                   } >> "$GITHUB_STEP_SUMMARY"
 
             - name: Checkout
-              uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+              uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
+
+            - name: Install gh CLI
+              shell: bash
+              run: |
+                  if command -v gh &>/dev/null; then
+                    echo "gh already available: $(gh --version | head -1)"
+                    exit 0
+                  fi
+                  echo "Installing gh CLI..."
+                  curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+                    | sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg
+                  echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+                    | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null
+                  sudo apt-get update -qq
+                  sudo apt-get install -y gh
+              env:
+                  GH_TOKEN: ${{ github.token }}
 
             - name: Validate release trigger and authorization guard
               shell: bash