[vitormattos]

Scope

Update release automation on stable35 to published, immutable release-tool v0.12.0, SHA 51355769089a6796c23d6c966108afbdaf858c32.

• Synchronize the App Store publishing Action, prepare-release, nightly-release and workflow lock from LibreCodeCoop/.github, preserving the branch-specific patches.
• Point the shared publisher at reviewed immutable Action commit 8828d1047c31ac1c6bf1998436b2a73e7e5c6288. The publisher does not perform live freshness checks; release-tool composite Actions set PHP 8.5 only for tool execution, leaving app build PHP unchanged.
• Align independently managed release metadata and the historical resume-release Action to the same v0.12.0 commit.
• Update workflow-lock provenance to catalog commit 01db7c406c0c445627381804f60b62c61edbf220, with the matching source-template SHA-256.

Verification

• Original official template synchronization returned blocked=false, patch_failed=false, failed=[].
• All release-tool Action references in this branch point to v0.12.0.
• The published PHAR under PHP 8.5 validated this branch's real .nextcloud-release.yml configuration (valid: true).
• GitHub CI for the revised head must finish before merge; no application source or PHP compatibility range is changed.
• Commits cryptographically signed and DCO-compliant.

Merge order

Ready for code review, but dependent on merging LibreCodeCoop/.github#110 first. Do not bypass branch-protection approvals and do not publish an application release as a test.