fix(ci): push workflow changes to active branch ref

[abdelkadermeflahi6-web]

Motivation

• Ensure CI pushes created by the protection workflow target the current branch/ref to avoid ambiguous or rejected default pushes when the workflow commits updated fingerprint files.

Description

• Replace git push with git push origin HEAD:${{ github.head_ref || github.ref_name }} in .github/workflows/protection.yml for the step that commits intellectual_protection/release_fingerprint.json.

Testing

• Ran rg -n "git push" .github -S, git diff --check, and git status --short, and inspected .github/workflows/protection.yml to confirm the updated push command; all checks succeeded.

---

Codex Task

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.