This is to avoid the need for a bot token with push access to main.

The workflow would still need some elevated permissions but those would be scoped more narrowly.

Since this is a library which is consumed as Go module (as opposed to a pre-built binary), the release process still consists of roughly the following steps:

• update internal/version/version.go
• update/generate CHANGELOG.md (via changie)

TODO

• Address missing newlines in (re)generated CHANGELOG.md - https://changie.dev/config/#kindconfig-skipglobalpost
• Add workflow for reporting missing changelog entries
• Add new labels
• Confirm how tag pushing should be done