[BRE-1424] Pass in the GH tag to use for building BW lite

.github/workflows/build-bitwarden-lite.yml

@@ -7,6 +7,10 @@ on:
       - ".github/workflows/build-bitwarden-lite.yml"
   workflow_dispatch:
     inputs:
+      repo_ref:
+        description: "Self-host ref to use for checkout (Default: current ref)"
+        type: string
+        required: false
       server_branch:
         description: "Server branch name (examples: 'main', 'rc', 'feature/sm')"
         type: string
@@ -25,6 +29,10 @@ on:
         default: false
   workflow_call:
     inputs:
+      repo_ref:
+        description: "Self-host ref to use for checkout (Default: current ref)"
+        type: string
+        required: false
       server_branch:
         description: "Server branch name (examples: 'main', 'rc', 'feature/sm')"
         type: string
@@ -64,6 +72,7 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
+          ref: ${{ inputs.repo_ref || github.ref }}
           persist-credentials: false
 
       - name: Set Server variables
@@ -113,6 +122,7 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
+          ref: ${{ inputs.repo_ref || github.ref }}
           persist-credentials: false
 
       - name: Set up QEMU emulators

.github/workflows/release.yml

@@ -417,13 +417,16 @@ jobs:
   build-lite-image:
     name: Build Bitwarden lite image
     uses: ./.github/workflows/build-bitwarden-lite.yml
-    needs: update-versions
+    needs:
+      - update-versions
+      - release-github
     permissions:
       contents: read
       id-token: write
       packages: write
       security-events: write
     with:
+      repo_ref: "v${{ inputs.release_version }}"
       use_latest_core_version: true
       use_latest_web_version: true
     secrets: inherit
@@ -576,6 +579,6 @@ jobs:
               owner: 'bitwarden',
               repo: 'self-host',
               workflow_id: 'release-digital-ocean.yml',
-              ref: 'main',
+              ref: 'v${{ inputs.release_version_}}',
               inputs: {}
             });