ci: create github release on tag

Author: amorison

.github/workflows/ci.yml

@@ -27,14 +27,16 @@ jobs:
       - run: just check-all
 
   pypi-publish:
+    if: github.ref_type == 'tag'
     runs-on: ubuntu-latest
     needs: tests
-    if: "startsWith(github.ref, 'refs/tags/')"
     permissions:
       id-token: write
+      contents: write
     environment: pypi
     steps:
       - uses: actions/checkout@v5
       - uses: astral-sh/setup-uv@v7
       - run: uv build
       - run: uv publish
+      - uses: softprops/action-gh-release@v2