fix(release): split express context into get-express-release-context job

Extract express version/tag resolution and Docker Hub existence check
into a dedicated get-express-release-context job that runs after
release-bitgojs. publish-express-to-docker-hub now depends solely on
this job and is cleanly decoupled from get-release-context.

Workflow chain: get-release-context → release-bitgojs
                → get-express-release-context → publish-express-to-docker-hub

Ticket: VL-4192

Author: louib

.github/workflows/npmjs-release.yml

@@ -202,15 +202,18 @@ jobs:
             --title "v${{ steps.extract-version.outputs.new-version }}" \
             --notes-file "${{ steps.version-bump-summary.outputs.text-file }}"
 
-  publish-express-to-docker-hub:
-    name: Publish Express To Docker Hub
+  get-express-release-context:
+    name: Get Express release context
     if: inputs.dry-run == false
     needs:
-      - get-release-context
       - release-bitgojs
     runs-on: ${{ vars.BASE_RUNNER_TYPE || 'ubuntu-latest' }}
-    timeout-minutes: 40
-    environment: bitgo-express
+    timeout-minutes: 10
+    outputs:
+      version: ${{ steps.compute-express-git-tag.outputs.version }}
+      git-tag: ${{ steps.compute-express-git-tag.outputs.git-tag }}
+      git-sha: ${{ steps.compute-express-git-sha.outputs.git-sha }}
+      docker-exists: ${{ steps.check-docker-image.outputs.docker-exists }}
     steps:
       - name: Checkout rel/latest branch
         uses: actions/checkout@v6
@@ -229,35 +232,20 @@ jobs:
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
           echo "git-tag=$TAG" >> "$GITHUB_OUTPUT"
 
-      - name: Check if Docker image already exists in Docker Hub
-        id: check-docker-image
-        run: |
-          VERSION="${{ steps.compute-express-git-tag.outputs.version }}"
-          if curl -s -f "https://hub.docker.com/v2/repositories/bitgo/express/tags/$VERSION" > /dev/null; then
-            echo "⚠️ Docker image bitgo/express:$VERSION already exists — skipping publish"
-            echo "express-docker-exists=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "✅ Docker image bitgo/express:$VERSION does not exist — will publish"
-            echo "express-docker-exists=false" >> "$GITHUB_OUTPUT"
-          fi
-
       - name: Checkout express target git tag
-        if: steps.check-docker-image.outputs.express-docker-exists != 'true'
         uses: actions/checkout@v6
         with:
           ref: ${{ steps.compute-express-git-tag.outputs.git-tag }}
           fetch-depth: 2
 
       - name: Parse express git SHA
-        if: steps.check-docker-image.outputs.express-docker-exists != 'true'
         id: compute-express-git-sha
         run: |
           GIT_SHA=$(git rev-parse HEAD)
           echo "Git SHA: $GIT_SHA"
           echo "git-sha=$GIT_SHA" >> "$GITHUB_OUTPUT"
 
       - name: Sanity Check Express Git Tag
-        if: steps.check-docker-image.outputs.express-docker-exists != 'true'
         run: |
           CURRENT_VERSION="${{ steps.compute-express-git-tag.outputs.version }}"
           PREVIOUS_VERSION=$(git show HEAD~1:./modules/express/package.json | jq -r '.version')
@@ -273,9 +261,21 @@ jobs:
 
           echo "✅ Express version bump lines up with git tag"
 
+      - name: Check if Docker image already exists in Docker Hub
+        id: check-docker-image
+        run: |
+          VERSION="${{ steps.compute-express-git-tag.outputs.version }}"
+          if curl -s -f "https://hub.docker.com/v2/repositories/bitgo/express/tags/$VERSION" > /dev/null; then
+            echo "⚠️ Docker image bitgo/express:$VERSION already exists — skipping publish"
+            echo "docker-exists=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "✅ Docker image bitgo/express:$VERSION does not exist — will publish"
+            echo "docker-exists=false" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Update Express GitHub summary
         run: |
-          if [ "${{ steps.check-docker-image.outputs.express-docker-exists }}" == "true" ]; then
+          if [ "${{ steps.check-docker-image.outputs.docker-exists }}" == "true" ]; then
             {
               echo "### ⚠️ Docker publish skipped"
               echo "Image \`bitgo/express:${{ steps.compute-express-git-tag.outputs.version }}\` already exists in Docker Hub."
@@ -295,26 +295,36 @@ jobs:
             } >> "$GITHUB_STEP_SUMMARY"
           fi
 
+  publish-express-to-docker-hub:
+    name: Publish Express To Docker Hub
+    if: needs.get-express-release-context.outputs.docker-exists != 'true'
+    needs:
+      - get-express-release-context
+    runs-on: ${{ vars.BASE_RUNNER_TYPE || 'ubuntu-latest' }}
+    timeout-minutes: 40
+    environment: bitgo-express
+    steps:
+      - name: Checkout BitGoJS repository
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.get-express-release-context.outputs.git-sha }}
+
       - name: Set up Docker Buildx
-        if: steps.check-docker-image.outputs.express-docker-exists != 'true'
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
       - name: Log in to Docker Hub
-        if: steps.check-docker-image.outputs.express-docker-exists != 'true'
         uses: docker/login-action@v4
         with:
           username: ${{ env.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API_KEY }}
 
       - name: Generate build date
-        if: steps.check-docker-image.outputs.express-docker-exists != 'true'
         id: build-date
         run: |
           BUILD_DATE=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
           echo "build-date=$BUILD_DATE" >> "$GITHUB_OUTPUT"
 
       - name: Build and push Express Docker image
-        if: steps.check-docker-image.outputs.express-docker-exists != 'true'
         id: docker-build
         uses: docker/build-push-action@v7
         with:
@@ -323,8 +333,8 @@ jobs:
           push: true
           tags: |
             bitgo/express:latest
-            bitgo/express:${{ steps.compute-express-git-tag.outputs.version }}
+            bitgo/express:${{ needs.get-express-release-context.outputs.version }}
           build-args: |
-            VERSION=${{ steps.compute-express-git-tag.outputs.version }}
+            VERSION=${{ needs.get-express-release-context.outputs.version }}
             BUILD_DATE=${{ steps.build-date.outputs.build-date }}
-            GIT_HASH=${{ steps.compute-express-git-sha.outputs.git-sha }}
+            GIT_HASH=${{ needs.get-express-release-context.outputs.git-sha }}