fix(release): stage Beta packages until verification completes

.github/workflows/android-apk.yml

@@ -428,7 +428,9 @@ jobs:
         with:
           tag_name: ${{ github.ref_name }}
           name: OpenLess ${{ github.ref_name }}
-          draft: false
+          # The desktop and Android jobs share one Beta draft. Publish it only
+          # after all jobs and package verification have finished.
+          draft: ${{ env.OPENLESS_RELEASE_CHANNEL == 'beta' }}
           prerelease: ${{ env.OPENLESS_RELEASE_CHANNEL == 'beta' }}
           append_body: true
           body_path: ${{ runner.temp }}/android-release-body.md

.github/workflows/release-tauri.yml

@@ -501,7 +501,9 @@ jobs:
         with:
           tag_name: ${{ github.ref_name }}
           name: 'OpenLess ${{ github.ref_name }}'
-          draft: false
+          # Keep Beta assets private until all platforms have built and the
+          # administrator has verified the downloadable packages.
+          draft: ${{ env.OPENLESS_RELEASE_CHANNEL == 'beta' }}
           # beta 渠道的 release 必须标 prerelease=true：GitHub UI 会折叠它，
           # 普通用户看不到；同时只上传 latest-*-beta.json，正式版用户的
           # endpoint（latest-*.json）永远不会被覆盖，保证 Beta 不溢出正式版。

RELEASING.md

@@ -72,6 +72,10 @@ The script takes a plain `X.Y.Z`; for a prerelease version such as
 3. CI is green on the commit being tagged.
 4. The applicable [desktop feature and device acceptance](docs/2.0-desktop-acceptance.md), signing, and distribution requirements are met; green builds alone do not establish product readiness.
 5. Then, and only then, push the release tag.
+6. Beta tag workflows upload desktop and Android assets to a shared draft.
+   Wait for both workflows to succeed, verify the packages and Beta updater
+   manifests, then publish that draft as a prerelease. Do not rerun an asset
+   workflow after publication without first returning the release to draft.
 
 Before attaching Linux assets, additionally require all of the following: