feat: add a job for running semantic-release in dry-run mode

This MR adds a dry-run mode for semantic-release that will run on push events. I couldn't get it to work for merged results pipelines as semantic-release checks that the remote and local branches are in sync, and that doesn't work with a merged result commit.

This driver for this change is that I want to make sure semantic-release is able to run after I migrate secrets used by semantic-release into vault (https://gitlab.com/gitlab-com/gl-infra/reliability/-/work_items/120609547).