fix: don't push release commit to protected main branch

[farhan]

Problem

The Release workflow fails on main at the Run Semantic Release step:

remote: error: GH006: Protected branch update failed for refs/heads/main.
remote: - Required status check "openedx/cla" is expected.
 ! [remote rejected] main -> main (protected branch hook declined)
GitCommandError: Cmd('git') failed ... cmdline: git push origin main

python-semantic-release tries to push a version/changelog commit back to main. main is a protected branch requiring the openedx/cla status check, which a bot push cannot satisfy, so the push is rejected and the release job fails.

Fix

Set commit: "false" on the python-semantic-release action so it no longer creates or pushes a commit to the branch.

The package version is derived from git tags via setuptools-scm, so no in-repo commit is required. The action still:

• creates and pushes the tag (tags are not subject to branch protection),
• creates the GitHub Release,
• and the downstream PyPI publish job is unaffected.

This requires no branch-protection/admin changes.

Notes

• Draft PR — please confirm the approach before merge.
• The openedx/cla requirement on main for bot pushes is the root cause; the alternative fix (bypass CLA for the release actor) needs repo-admin access.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.17%. Comparing base (dc44893) to head (ad60d41).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #65   +/-   ##
=======================================
  Coverage   82.17%   82.17%           
=======================================
  Files          48       48           
  Lines        1419     1419           
  Branches      110      110           
=======================================
  Hits         1166     1166           
  Misses        221      221           
  Partials       32       32           

Flag	Coverage Δ
unittests	82.17% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.