Cut a release on every push to main

Each main push now builds and publishes a signed APK as a GitHub Release
tagged v0.0.<commit-count>. Tag-triggered runs keep their existing
tag-derived version, and workflow_dispatch still produces just an artifact.
Adds a per-ref concurrency group so back-to-back pushes serialize.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: dfalling

.github/workflows/release.yml

@@ -2,13 +2,22 @@ name: Release APK
 
 on:
   push:
+    branches:
+      - main
     tags:
       - 'v*'
   workflow_dispatch:
 
 permissions:
   contents: write
 
+# Serialize release builds on each ref so two near-simultaneous pushes don't
+# race for the same version tag. We don't cancel in-progress runs — a release
+# build mid-upload should finish before the next one starts.
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -45,12 +54,13 @@ jobs:
       - name: Compute version
         id: version
         run: |
+          VERSION_CODE=$(git rev-list --count HEAD)
           if [[ "$GITHUB_REF" == refs/tags/v* ]]; then
             VERSION_NAME="${GITHUB_REF_NAME#v}"
           else
-            VERSION_NAME="0.0.0-dev.${GITHUB_RUN_NUMBER}"
+            # main pushes (and manual dispatch) get a commit-count-derived version.
+            VERSION_NAME="0.0.${VERSION_CODE}"
           fi
-          VERSION_CODE=$(git rev-list --count HEAD)
           echo "name=$VERSION_NAME" >> "$GITHUB_OUTPUT"
           echo "code=$VERSION_CODE" >> "$GITHUB_OUTPUT"
           echo "Building $VERSION_NAME (code $VERSION_CODE)"
@@ -98,9 +108,14 @@ jobs:
           if-no-files-found: error
 
       - name: Create GitHub Release
-        if: startsWith(github.ref, 'refs/tags/v')
+        # Cut a release for both `main` pushes and `v*` tag pushes; skip for
+        # workflow_dispatch (manual runs just produce the workflow artifact).
+        if: github.event_name == 'push'
         uses: softprops/action-gh-release@v2
         with:
+          # softprops will create the tag if it doesn't already exist.
+          tag_name: v${{ steps.version.outputs.name }}
+          target_commitish: ${{ github.sha }}
           files: artifacts/*.apk
           generate_release_notes: true
           fail_on_unmatched_files: true