fix(ci): harden release automation workflows

.github/workflows/sync-dev-after-release.yml

@@ -1,15 +1,12 @@
 name: Sync Dev After Main Release
 
 on:
-  workflow_run:
-    workflows: ["Release"]
-    types: [completed]
-    branches: [main]
+  release:
+    types: [published]
 
 jobs:
   sync-dev:
-    # Only run if Release workflow succeeded on main branch
-    if: ${{ github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.head_branch == 'main' }}
+    if: ${{ !github.event.release.prerelease && github.event.release.target_commitish == 'main' && startsWith(github.event.release.tag_name, 'v') && !contains(github.event.release.tag_name, '-') }}
     runs-on: ubuntu-latest
 
     permissions: