fix: CI pipeline security scan and release job configuration

Author: byerlikaya

.github/workflows/ci.yml

@@ -146,7 +146,7 @@ jobs:
     name: Create GitHub Release
     runs-on: ubuntu-latest
     needs: [build, publish-nuget]
-    if: github.ref == 'refs/heads/main'
+    if: github.ref == 'refs/heads/main' && contains(github.event.head_commit.message, '[release]')
     permissions:
       contents: write
       packages: read
@@ -268,6 +268,9 @@ jobs:
       with:
         dotnet-version: ${{ env.DOTNET_VERSION }}
 
+    - name: Restore dependencies
+      run: dotnet restore
+        
     - name: Run security scan
       run: |
         dotnet list package --vulnerable