ci: trigger goreleaser on tag push, create draft release

Switch the goreleaser workflow from a `release` event trigger to a tag
push trigger. The `release` event never fired for draft releases (no
`release` activity type is emitted while a release is a draft), so the
automated release build never ran.

GoReleaser now builds on `v*` tag pushes and creates the GitHub release
as a draft, uploading all artifacts. The release notes are generated
manually in the UI (selecting the previous tag) and the release is then
published. Publishing last keeps assets intact under immutable releases,
which freeze a release's assets on publish.

Also pass `--config goreleaser.yml` since the config uses a non-standard
filename that GoReleaser would not otherwise auto-discover.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: BakerNet

.github/workflows/goreleaser.yml

@@ -1,8 +1,9 @@
 name: goreleaser
 
 on:
-  release:
-    types: [created]
+  push:
+    tags:
+      - 'v*'
 
 permissions: {}
 
@@ -27,6 +28,6 @@ jobs:
         uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7
         with:
           version: latest
-          args: release --clean
+          args: release --clean --config goreleaser.yml
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

goreleaser.yml

@@ -58,9 +58,11 @@ checksum:
   name_template: 'checksums.txt'
 snapshot:
   version_template: "{{ .Tag }}-next"
+release:
+  # Create the GitHub release as a draft so the changelog can be generated
+  # manually (selecting the previous tag) before publishing. Publishing last
+  # is also required for immutable releases, since assets are frozen on publish.
+  draft: true
 changelog:
-  sort: asc
-  filters:
-    exclude:
-      - '^docs:'
-      - '^test:'
+  # Notes are generated manually in the GitHub UI before publishing.
+  disable: true