Release tags and auto-start

With release tags on (the default for new flows), an event’s deploy tags each project’s locked commit as kodmos/<event>/<deploy> and runs the workflow on that tag. Kodmos keeps the tags of the last ten deploys in each repository.

• Workflows that run on tag pushes would start for every release tag: exclude kodmos/** from their tag filters. The editor lists them.
• Environments that only deploy from certain branches must also allow tags matching kodmos/**.
• Workflows see the tag, not the branch, in github.ref_name.

A workflow that runs on every push also runs on tag pushes. Keep its branches, and leave out the release tags:

on:
  push:
    branches: ['**']
    tags:
      - '**'
      - '!kodmos/**' # not the tags Kodmos deploys from

With auto-start on, a flow also starts when one of its first workflows runs outside Kodmos, such as a push or a manual run on GitHub on the deployment’s branch. Kodmos follows that run and continues the chain. Runs Kodmos started itself never auto-start other flows.