fix: merge develop into main (#452)

### Description

Release v5.2.2
- adds label to run GS Scorecard job on demand
- adjustments to dynamic python version control
- fail the workflow is dev_deps doesnt exist
- install dependencies in separate venv for unit tests

### Checklist

- [ ] `README.md` has been updated or is not required
- [ ] push trigger tests
- [ ] manual release test
- [ ] automated releases test
- [ ] pull request trigger tests
- [ ] schedule trigger tests
- [ ] workflow errors/warnings reviewed and addressed

### Testing done 

https://github.com/splunk/splunk-add-on-for-google-workspace/actions/runs/19929680065/job/57138613216?pr=657

---------

Co-authored-by: mkolasinski-splunk <105011638+mkolasinski-splunk@users.noreply.github.com>
Co-authored-by: Marcin Kolasinski <mkolasinski@splunk.com>
Co-authored-by: Artem Rys <rysartem@gmail.com>

Author: 3 people

.github/workflows/reusable-build-test-release.yml

@@ -191,6 +191,7 @@ jobs:
       execute-upgrade: ${{ steps.determine-test-execution-flags.outputs.execute_upgrade }}
       exit-first: ${{ steps.determine-test-execution-flags.outputs.exit-first }}
       execute-unit: ${{ steps.determine-test-execution-flags.outputs.execute_unit }}
+      execute-gs-scorecard: ${{ steps.determine-test-execution-flags.outputs.execute_gs_scorecard }}
       s3_bucket_k8s: ${{ steps.k8s-environment.outputs.s3_bucket }}
       argo_server_domain_k8s: ${{ steps.k8s-environment.outputs.argo_server_domain }}
       argo_token_secret_id_k8s: ${{ steps.k8s-environment.outputs.argo_token_secret_id }}
@@ -222,7 +223,7 @@ jobs:
         run: |
           set +e
           declare -A EXECUTION_FLAGS
-          TESTSET=("execute_unit" "execute_knowledge" "execute_spl2" "execute_ui" "execute_modinput_functional" "execute_ucc_modinput_functional" "execute_scripted_inputs" "execute_upgrade")
+          TESTSET=("execute_unit" "execute_knowledge" "execute_spl2" "execute_ui" "execute_modinput_functional" "execute_ucc_modinput_functional" "execute_scripted_inputs" "execute_upgrade" "execute_gs_scorecard")
           for test_type in "${TESTSET[@]}"; do
             EXECUTION_FLAGS["$test_type"]="false"
           done
@@ -245,6 +246,10 @@ jobs:
               echo "spl2::true"
             fi
 
+            # GS Scorecard is always available
+            TESTS_TO_CONSIDER_FOR_EXECUTION+=("execute_gs_scorecard")
+            echo "gs_scorecard::true"
+
             found_unit_test=false
             for test_name in "${TESTS_TO_CONSIDER_FOR_EXECUTION[@]}"; do
               if [[ "$test_name" == "execute_unit" ]]; then
@@ -824,8 +829,10 @@ jobs:
 
   run-gs-scorecard:
     name: quality-gs-scorecard
-    needs: build
-    if: ${{ !cancelled() && needs.build.result == 'success' && (github.ref_name == 'main' && github.event_name == 'push') }}
+    needs:
+      - build
+      - setup-workflow
+    if: ${{ !cancelled() && needs.build.result == 'success' && needs.setup-workflow.outputs.execute-gs-scorecard == 'true' }}
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4