ci: gate release deploy with verify and remove tag-build duplication

Ensure release tags run a verify step before deploy, and limit maven-build to main branch/PR checks to avoid duplicate tag-triggered build pipelines.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: codeboyzhou

.github/workflows/maven-deploy.yml

@@ -6,8 +6,29 @@ on:
       - 'v*'
 
 jobs:
+  verify:
+    name: maven verify
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Git Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          cache: maven
+          java-version: '17'
+          distribution: 'temurin'
+
+      - name: Verify with Maven
+        run: |
+          chmod +x ./mvnw
+          ./mvnw -B clean verify --file pom.xml
+
   deploy:
     name: maven deploy
+    needs: verify
     runs-on: ubuntu-latest
 
     steps:
@@ -29,7 +50,7 @@ jobs:
       - name: Deploy to Maven Central
         run: |
           chmod +x ./mvnw
-          ./mvnw clean deploy -DskipTests -B
+          ./mvnw -B clean deploy --file pom.xml
         env:
           MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
           MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}