Align release pipeline with the standard mechanism

Match terraform-provider-litellmvaultsecret's release flow so both providers
publish the same way.

- Point the upload at the reachable artifactapi host
  (artifactapi.k8s.syd1.au.unkin.net) instead of the unresolvable artifactapi3
- Add kubernetes backend options (serviceAccount + resource requests/limits) to
  the package and upload steps
- Make the upload step explicitly depend_on the package step

.woodpecker/release.yml

@@ -6,6 +6,16 @@ steps:
     image: git.unkin.net/unkin/almalinux9-gobuilder:20260606
     commands:
       - make package VERSION=${CI_COMMIT_TAG}
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
 
   - name: upload
     image: git.unkin.net/unkin/almalinux9-base:20260606
@@ -14,6 +24,17 @@ steps:
         VERSION=$$(echo ${CI_COMMIT_TAG} | sed 's/^v//')
         FILE="terraform-provider-artifactapi_$${VERSION}_linux_amd64.zip"
         curl -f -X PUT \
-          "https://artifactapi3.k8s.syd1.au.unkin.net/api/v2/remotes/terraform-unkin/files/unkin/artifactapi/$${FILE}" \
+          "https://artifactapi.k8s.syd1.au.unkin.net/api/v2/remotes/terraform-unkin/files/unkin/artifactapi/$${FILE}" \
           -H "Content-Type: application/zip" \
           --data-binary @"$${FILE}"
+    depends_on: [package]
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m