Use GH_TOKEN to publish release

Author: razor-x

.github/workflows/publish.yml

@@ -30,6 +30,7 @@ jobs:
       - name: Create GitHub release
         uses: softprops/action-gh-release@v1
         with:
+          token: ${{ secrets.GH_TOKEN }}
           fail_on_unmatched_files: true
           prerelease: ${{ contains(github.ref_name, '-') }}
           files: tex/*.pdf

README.md

@@ -153,7 +153,7 @@ which will create a GitHub Release with the generated PDFs.
 - Directly from [GitHub Releases].
 - Using Git with
   ```
-  $ git tag 1.2.3 -m v1.2.3
+  $ git tag --sign 1.2.3 -m v1.2.3
   $ git push --tags
   ```
 - Using Bower with
@@ -163,6 +163,14 @@ which will create a GitHub Release with the generated PDFs.
 
 [GitHub Releases]: https://github.com/makenew/latex-project/releases/new
 
+## GitHub Actions
+
+_GitHub Actions should already be configured: this section is for reference only._
+
+The following repository secrets must be set on [GitHub Actions]:
+
+- `GH_TOKEN`: A personal access token for the user.
+
 ## Source Code
 
 The [makenew-latex-project source] is hosted on GitHub.