PR #10 merged 0.2.0's manifest/changelog bump, but no v0.2.0 tag ever
got created or pushed - skip-github-release turned out to skip the
underlying git tag as well, not just the GitHub Release object
(googleapis/release-please-action#1034). Since release.yml only
triggers on a tag push, this silently broke both the git release and
the actual NuGet publish for 0.2.0.

Replaced skip-github-release with draft: true instead: release-please
still creates the tag (restoring the trigger chain) plus a draft
(not publicly visible) GitHub Release. release.yml's publish job now
explicitly un-drafts that same release (draft: false) only after a
successful, approved NuGet push, rather than creating a second one -
softprops/action-gh-release updates an existing release for a tag
rather than failing or duplicating.