Fix and harden GitHub automation

[jdpraveen]

Summary

Related issue

Verification

./build.sh --all

Compatibility and risk

Checklist

• I have read and followed CONTRIBUTING.md.
• The change is focused and includes tests for new behavior and edge cases.
• I updated user documentation for public API or behavior changes.
• I added a concise CHANGELOG.md entry when the change is notable to users.
• I preserved C++11 compatibility and introduced no new dependency, or I
  clearly justified the exception.
• I ran the relevant checks and recorded them above.
• I have the right to submit this contribution under the project's
  Apache-2.0 contribution terms.