New Docker Build GH Actions

[chaptersix]

What changed?

• updates goreleaser to v2
• add GHA for build admin-tools and server images within this repo. docker-builds will only be used for building pre 1.30 images
• added GHA to promote docker builds from temporaliotest to temproalio docker image repos
• trivy security scanning gates for image promotion (pulled rom docker-builds repo). The gate can be overridden

Why?

• we decided to move away from building images in docker-builds. The complexity is not needed
• updates goreleaser to v2 because the v1 definitions might be no longer supported at some point and this is a good time to do it
• I used go scripts for the more complex flows instead of js or bash so we don't introduce another language contributors need to be familiar with. IMO the js or bash I did use it simple enough to understand.

How did you test it?

It passes in CI.

Potential risks

• these build pipelines are only compatible with the new docker images.
• merging this PR may break our nightly tests. Will double check before merging
• flows that are not triggered by opening a PR are untested and therefore not completely validated

[chaptersix]

Related Changes:
#8671
temporalio/features#709
temporalio/helm-charts#797

[chaptersix]

Related Changes: #8671 temporalio/features#709 temporalio/helm-charts#797

#8477

[gow]

Looks good. See some comments below.