This allows for a dispatchable patch tagging workflow, which means we
can remove the need for `contents:write` in the main ci.yml.