1cb3fc3d14
The release workflow gates a tag, which is the last possible moment: a commit that breaks the suite stays green on main until somebody decides to publish. Runs go vet and go test on pushes to main and on pull requests. push is scoped to main so a branch pushed as part of a pull request is not checked twice, and runs for the same ref cancel each other.