feat(ci): publish build artifacts as GitHub releases (#1222)

.github/workflows/build-static.yaml

@@ -9,6 +9,11 @@ on:
         type: string
         required: false
         default: ""
+      finalise-release:
+        description: "Publish the GitHub Release after this workflow completes. Set false when an orchestrator will finalise the release."
+        type: boolean
+        required: false
+        default: true
   workflow_call:
     inputs:
       build-version:
@@ -16,10 +21,15 @@ on:
         type: string
         required: false
         default: ""
+      finalise-release:
+        description: "Publish the GitHub Release after this workflow completes. Set false when an orchestrator will finalise the release."
+        type: boolean
+        required: false
+        default: true
 
 permissions:
   actions: read
-  contents: read
+  contents: write
   packages: write
 
 jobs:
@@ -28,5 +38,6 @@ jobs:
     with:
       image: fluxer-static
       dockerfile: fluxer_static/Dockerfile
-      build-version: ${{ inputs.build-version }}
+      build-version: ${{ inputs['build-version'] }}
+      finalise-release: ${{ inputs['finalise-release'] != false }}
     secrets: inherit