ci: tag as a separate step

.github/workflows/ci.yaml

@@ -46,6 +46,12 @@ jobs:
       - name: Ensure Quartz builds, check bundle info
         run: npx quartz build --bundleInfo
 
+  publish-tag:
+    if: ${{ github.repository == 'jackyzha0/quartz' }}
+    run-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
       - name: Get package version
         run: node -p -e '`PACKAGE_VERSION=${require("./package.json").version}`' >> $GITHUB_ENV