formulas/release.sh still uses API tokens for mirror pushes. Add mounts
alongside secrets rather than replacing them, so both the .sh (token) and
.toml (SSH) formula paths work.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The assert function declared PRIMARY_BRANCH as required but the
implementation hardcoded 'main' in three places. Replace all three
with $PRIMARY_BRANCH and call _assert_release_globals at entry.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
