fix(CI): use intermediate env variable to prevent TAG injection

fix(CI): use intermediate env variable to prevent TAG injection #6254