make releases immutable for supply chain attack security

[dangbert]

TL;DR

Can we consider enabling "immutable" releases on this repo to reduce supply chain security attacks?

https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases#what-immutable-releases-protect

Detailed design

No response

Additional information

No response