Rework deploy workflow

[BeryJu]

Currently we deploy to pkg.goauthentik.io on every main push, however ideally we'd have a separate deploy branch for that, and/or git tag based, that would both add the archives to the github release and also publish a new version of the repo

• Push to main
  • deploy to some sort of gh-main domain
  • auto-bump version based on current version and timestamp
• GH workflow to create release
  • bump in CI
  • Create release on GH
  • deploy to pkg.goauthentik.io

Version branches?

[dominic-r]

git tags would be ideal to make nix versioning easier to manage