ci: Try to make the release workflow run after tagging a new release.

.github/workflows/release.yml

@@ -4,7 +4,12 @@ on:
   # goreleaser is put into snapshot mode when not on a tag
   pull_request:
   merge_group:
-  push:
+  push: # testing, unless there's a tag (steps.0.if below)
+  workflow_run:
+    workflows: ["tag new release"]
+    types:
+      - completed
+
 
 env:
   REGISTRY: ghcr.io
@@ -22,6 +27,8 @@ jobs:
     outputs:
       binary_hashes: ${{ steps.binary.outputs.hashes }}
       image_subjects: ${{ steps.image.outputs.subjects }}
+    # https://github.com/orgs/community/discussions/26238
+    if: ${{ !github.event.workflow_run || github.event.workflow_run.conclusion == 'success' }}
     steps:
       - if: ${{ !startsWith(github.ref, 'refs/tags/') }}
         run: echo "flags=--snapshot" >> $GITHUB_ENV

.github/workflows/tag-new-release.yml

@@ -1,8 +1,9 @@
 name: tag new release
 
 on:
+  push: # for testing
   pull_request:  # for testing
-  workflow_dispatch:
+  workflow_dispatch:  # manual invocation
   schedule:
     - cron: "30 5 * * 0"