ci: publish S3 via geniex repo to satisfy OIDC trust

The bitsyfactory IAM role's OIDC trust only allows repo:qcom-ai-hub/geniex,
so after the qualcomm/nexa-sdk migration the publish-s3 job can no longer
assume it. Replace the inline S3 upload with a dispatch to geniex's
chore/publish-s3 workflow (PAT with actions:rw on geniex), passing this
run's id; geniex pulls our release-assets artifact cross-repo and uploads
to S3 under its own trusted identity. We then watch the geniex run with
--exit-status so an S3 failure still fails this job.

Remove the now-unused AWS actions (configure-multiple-aws-roles,
configure-aws-profile) and release_s3_manifest.py — they moved to the
geniex chore/publish-s3 branch. Requires a new GENIEX_PUBLISH_PAT secret.

Signed-off-by: RemiliaForever <remilia@koumakan.cc>

Author: RemiliaForever