fix(ci): pass credentials to release promotion job

.github/workflows/release.yaml

@@ -21,8 +21,9 @@ jobs:
       contents: write
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      # We need to find out if there's been a previous beta release for this tag, as it'll affect which google play track we promote from
       - uses: octokit/[email protected]
-        name: Find beta tags
+        name: Find beta tags if this is a prod release
         id: get_beta_tags
         with:
           route: GET /repos/owntracks/android/git/matching-refs/tags/${{ github.ref }}-beta
@@ -53,7 +54,7 @@ jobs:
           pip install -r .github/google-play-api/requirements.txt
 
       - name: Get current version code from internal track
-        if: ${{ !contains(github.ref, 'beta') && steps.tagCount.outputs.beta_tag_count == 0 }}
+        if: ${{ contains(github.ref, 'beta') || steps.tagCount.outputs.beta_tag_count == 0 }}
         env:
           ANDROID_PUBLISHER_CREDENTIALS: ${{ secrets.GOOGLE_CLOUD_SERVICE_ACCOUNT_CREDENTIALS }}
         run: |
@@ -118,13 +119,19 @@ jobs:
         run: ./gradlew promoteGmsReleaseArtifact --from-track internal --promote-track beta --release-status completed
         working-directory: project
         if: ${{ contains(github.ref, 'beta') }}
+        env:
+          ANDROID_PUBLISHER_CREDENTIALS: ${{ secrets.GOOGLE_CLOUD_SERVICE_ACCOUNT_CREDENTIALS }}
 
       - name: Promote play store production from beta
         run: ./gradlew promoteArtifact --from-track beta --promote-track production --release-status inProgress -user-fraction .1
         working-directory: project
         if: ${{ !contains(github.ref, 'beta') && steps.tagCount.outputs.beta_tag_count > 0 }}
+        env:
+          ANDROID_PUBLISHER_CREDENTIALS: ${{ secrets.GOOGLE_CLOUD_SERVICE_ACCOUNT_CREDENTIALS }}
 
       - name: Promote play store production from internal
         run: ./gradlew promoteArtifact --from-track internal --promote-track production --release-status inProgress -user-fraction .1
         working-directory: project
         if: ${{ !contains(github.ref, 'beta') && steps.tagCount.outputs.beta_tag_count == 0 }}
+        env:
+          ANDROID_PUBLISHER_CREDENTIALS: ${{ secrets.GOOGLE_CLOUD_SERVICE_ACCOUNT_CREDENTIALS }}