Only run publish job on tag pushes

Author: penberg

.github/workflows/CI.yml

@@ -111,6 +111,7 @@ jobs:
 
   publish:
     name: Publish
+    if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
     needs: [build]
     permissions: