fix(ci): handle release builds in GHA CI workflow

[BradLugo]

Description

Our tag make target relies on the RELEASE_TAG environment variable being set to the tag name when we perform a release build. Many of our scripts and processes rely on make tag outputting the current string (like the release version). We used to set this environment variable properly in OSCI due to:

scanner/scripts/ci/lib.sh

Line 622 in 372710a

handle_release_runs

scanner/scripts/ci/lib.sh

Lines 696 to 706 in 372710a

	handle_release_runs() {
	if ! is_OPENSHIFT_CI; then
	die "Only for OpenShift CI"
	fi
	local base_ref
	base_ref="$(get_base_ref)"
	if is_tagged && [[ "$base_ref" =~ ^release- ]]; then
	ci_export RELEASE_TAG "$(git tag --sort=creatordate --contains | tail -1)"
	fi
	}

For these changes, I copied the stackrox/stackrox pattern for handling tagged builds in our GitHub Action workflow, which was added in this PR: stackrox/stackrox#4239

Note: This needs to be cherry-picked into the release-2.34 branch.

[dcaravel]

LGTM, once merged will cherry-pick and re-tag

[RTann]

@BradLugo, I merged it now so @dcaravel can recut the release asap. Thanks for doing this