chore: make plugin release workflow safer

Author: shortov

.github/workflows/release.yml

@@ -3,6 +3,7 @@ name: Release
 on:
   release:
     types: [published]
+  workflow_dispatch:
 
 permissions:
   contents: write
@@ -39,18 +40,31 @@ jobs:
         run: ./build-zip.sh
 
       - name: Upload ZIP to release
+        if: ${{ github.event_name == 'release' }}
         uses: softprops/action-gh-release@v2
         with:
           files: aeo-content-ai-studio.zip
+          overwrite_files: true
 
   deploy:
     name: Deploy to WordPress.org
     runs-on: ubuntu-latest
-    needs: lint
+    if: ${{ github.event_name == 'release' }}
+    needs: [lint, build]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Validate WordPress.org Secrets
+        env:
+          SVN_USERNAME: ${{ secrets.SVN_USERNAME }}
+          SVN_PASSWORD: ${{ secrets.SVN_PASSWORD }}
+        run: |
+          if [ -z "$SVN_USERNAME" ] || [ -z "$SVN_PASSWORD" ]; then
+            echo "::error::Missing SVN_USERNAME or SVN_PASSWORD GitHub Actions secrets."
+            exit 1
+          fi
+
       - name: WordPress Plugin Deploy
         uses: 10up/action-wordpress-plugin-deploy@stable
         env: