[Task]: Defer dataflow container tag change right before tag first candidate in release branch

[Abacn]

What needs to happen?

Currently it is done by GitHub Action:

https://github.com/apache/beam/blame/f7fdfa7b348cf53ae6acfb06598a1145d2900504/.github/workflows/cut_release_branch.yml#L75

This has caused all Dataflow V1 job failing in cherry pick PR and release verification.

A fix is to add it to https://github.com/apache/beam/blame/master/.github/workflows/cut_release_branch.yml

However we also need other change

• Instead of providing a commit, the action checkout release-2.xx.0
• Run Update release version originally here: https://github.com/apache/beam/blob/f7fdfa7b348cf53ae6acfb06598a1145d2900504/.github/workflows/cut_release_branch.yml#L75
• If git diff has change, Commit and Push to release branch
• checkout again release branch, verify SHA
• then tag release

Issue Priority

Priority: 2 (default / most normal work should be filed as P2)

Issue Components

• [ ] Component: Python SDK
• [ ] Component: Java SDK
• [ ] Component: Go SDK
• [ ] Component: Typescript SDK
• [ ] Component: IO connector
• [ ] Component: Beam YAML
• [ ] Component: Beam examples
• [ ] Component: Beam playground
• [ ] Component: Beam katas
• [ ] Component: Website
• [ ] Component: Spark Runner
• [ ] Component: Flink Runner
• [ ] Component: Samza Runner
• [ ] Component: Twister2 Runner
• [ ] Component: Hazelcast Jet Runner
• [ ] Component: Google Cloud Dataflow Runner

[Abacn]

However I don't remember Java PreCommit Dataflow failed before in release verifications. Also there are Dataflow V1 tests can pass on release branch, e.g. https://github.com/apache/beam/actions/runs/8197405771/job/22419442367?pr=30569

Likely because Dataflow switched to use v2 as default in Beam 2.54.0+

Update: actually it is root caused and fixed in #30574