update provider publishing huge invalid zip files

ahhh, that lock fix works :)

Problem was also with 5.3.8, I had backported the upload to s3 stuff within the ant build, but I hadn’t removed the old GHA build triggers, so it was indeed overlapping build requests,

I have removed the duplicate GHA triggers from the 5.3.8 build

added a lock around artifact generation

i’d suggest we

1. add an exclusive lock around

2. update the zip extension to latest

3. use a temp subdir dir for each version

the update provider really needs to check if the produced zip files are valid, before uploading to s3