automate tag publish and update

[marcoieni]

e.g. tag v1 is automatically updated when tag v1.0.1 is published

maybe we should also automate publishing of x.y.z tags from CI

Should we protect the v1 branch?

Maybe we can apply for the semver thingy.

Maybe use release-please (not -plz)

Immutable releases

we can use https://docs.github.com/en/actions/how-tos/create-and-publish-actions/using-immutable-releases-and-tags-to-manage-your-actions-releases