enable immutable releases

[staabm]

I would love to enable immutable releases for this repository.

atm the github actions building the final release artifact is running on "release publish", meaning it would break.

it would be great we could have a similar mechanism to PHPStan repositories in https://github.com/phpstan/phpstan-nette/blob/466f89bb37284c57d1ddc9ca6c6773bf1bf8a229/.github/workflows/create-tag.yml#L3-L16

a custom workflow dispatch which triggers the release creation process, build a draft release, adds the necessary artifacts and after all is done publish the immutable git tag

[staabm]

@localheinz since you thankfully contributed the deployment workflow, maybe you would be willing to work on the above suggestions..?