fix(release): refresh OIDC token for FC uploads

[gujieye]

Summary

• Retry FC release actions and presigned OSS uploads up to 20 times.
• Use a 600-second timeout for every FC and OSS upload attempt.
• Cap exponential retry delays at 10 seconds.
• Fetch a fresh GitHub OIDC token before every FC attempt so long uploads do not reuse an expired token during release-finalize.

Validation

• pnpm exec vp test tools/release/lib/oss-direct-upload.test.mjs
• pnpm exec vp check tools/release/lib/oss-direct-upload.mjs tools/release/lib/oss-direct-upload.test.mjs
• git diff --check origin/main...HEAD