feat(ci): publish build artifacts as GitHub releases (#1222)

.github/workflows/build-app-proxy-self-hosted.yaml

@@ -9,6 +9,11 @@ on:
         type: string
         required: false
         default: ""
+      finalise-release:
+        description: "Publish the GitHub Release after this workflow completes. Set false when an orchestrator will finalise the release."
+        type: boolean
+        required: false
+        default: true
   workflow_call:
     inputs:
       build-version:
@@ -16,10 +21,15 @@ on:
         type: string
         required: false
         default: ""
+      finalise-release:
+        description: "Publish the GitHub Release after this workflow completes. Set false when an orchestrator will finalise the release."
+        type: boolean
+        required: false
+        default: true
 
 permissions:
   actions: read
-  contents: read
+  contents: write
   packages: write
 
 jobs:
@@ -29,5 +39,6 @@ jobs:
       image: fluxer-app-proxy-self-hosted
       dockerfile: fluxer_app_proxy/Dockerfile
       build-version: ${{ inputs['build-version'] }}
+      finalise-release: ${{ inputs['finalise-release'] != false }}
       extra-build-args: |
         FLUXER_APP_PROXY_TIME_FREEZE_ENABLED=false