feat(pdm): failsafe PDM release (failsafe steps and cleanup on failure)

[noirbizarre]

This PR make the pdm/release action more secure and avoid ending in an unstable state:

• not pushing the tag is considered a failure
• steps relying on CI-only credentials are considered critical (gemfury, nexus, docker):
  • can only be executed from CI
  • a release is considered failed as soon as one of them fail
  • they must be cleaned in the workflow (because they require credentials)
• documentation failure does not stop the release, as it can be published later from anybody with repository permissions
• GitHub release publication failure does not stop the process as it can be manually crafted after
• summary steps are should never make the workflow fail

On failure:

• docker image is deleted if any
• GemFury package is deleted if any
• Nexus package is deleted if any
• Tag Documentation is deleted if any
  Those removals are added to the workflow summary.

In case of successful release but with failed steps, those can be manually repaired:

• documentation can be published by checking out the tag and executing pdm doc:deploy --push <tag>
• GitHub release can be created from the tag by copy-pasting the version changelog from CHANGELOG.md

With this, there should be o more partial release with manual cleanup to do.