Fully implement Sophos Factory -> Ironbank pipeline

[Amndeep7]

• [x] Move current workflow changes for heimdall server from 'push to master' to instead be 'release': 248b98dc76edbcfb5cbb2bf923852d50494f0746
• [ ] Genericize or duplicate pipeline to work with heimdall lite and saf cli
• [ ] Modify the workflows for heimdall lite (and saf cli in its own repo) to have the pipeline
• [ ] Add additional envvars / secrets for the project/job id inputs to the action
• [x] Validate that the 'frabert' action to grab the release tag works when used for the release workflow: https://github.com/mitre/heimdall2/actions/runs/4801546295 (workflow ran successfully, correct tag was used)
• [ ] Sophos factory action needs to be updated off of node 12: https://github.com/sophos/factory-run-pipeline/issues/40 - just need to validate that it doesn't spout any warnings on the next release

[Amndeep7]

so we don't lose it

      - name: Get release tags
        shell: bash
        id: get-release-version
        run: |
          RELEASE_VERSION=$(git describe --abbrev=0 --tags | sed 's/v//')
          if [[ "$RELEASE_VERSION" =~ ^[[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+$ ]]; then
            echo "RELEASE_VERSION=$RELEASE_VERSION" >> $GITHUB_ENV
          else
            echo "Release version $RELEASE_VERSION does not match expected regex"
            exit 1
          fi