Fix release run lookup for annotated tags

[fallintoplace]

Fixes #2146.

lookup-run-id was resolving --tag inputs with git rev-parse <tag>, which returns the tag object SHA for annotated tags. That works for lightweight tags, but it breaks the documented release flow because cuda.core release tags are created with git tag -s, so the workflow can end up querying GitHub Actions with the wrong SHA.

This change peels tags to their underlying commit before calling gh run list, and adds a focused regression test that uses an annotated tag plus a fake gh shim to prove we pass the commit SHA through.

Checks:

• bash -n ci/tools/lookup-run-id
• uv run --with ruff ruff check ci/tools/tests/test_lookup_run_id.py
• uv run --with pytest pytest --noconftest ci/tools/tests/test_lookup_run_id.py

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[leofang]

Thanks, @fallintoplace, let's keep the one-liner fix.

[leofang]

Please kindly drop this test:

• Files in this folder are not tested anywhere in the CI, files here will bit-rot
• This is disproportionate since lookup-run-id is already regularly used (on a per-PR basis)