CI: Add a workflow to add a git tag via web UI

Today before triggering the release workflow we need to create a git tag locally and push it to the remote repo, because

1. GitHub for whatever reason does not offer a way for us to do this in the browser
2. our release workflow needs the tag to reverse-lookup the corresponding run ID:
   https://github.com/NVIDIA/cuda-python/blob/36b8c5fa799ddd9b8c9eb8b4816258485cbeeb7c/.github/workflows/release.yml#L22-L25

However, this mixed workflow is error prone and we did accidentally pushed wrong tags in the past. We should avoid this by adding a workflow to tag (based on the commit). Then, we can consider combine this new workflow with the release workflow, so that we don't need to provide both commit and tag; just the former should be enough for everything.

Beginne damit, .github/workflows/release.yml in den Zeilen 22-25 zu lesen, um zu verstehen, wie der Release-Workflow einen Run anhand eines Tags rückwärts nachschlägt. Untersuche anschließend die bestehenden Workflow-Konventionen des Repositorys und definiere einen Workflow, der einen Commit akzeptiert und dessen Tag über die GitHub-Weboberfläche erstellt; als erledigt gilt die Aufgabe, wenn der Release-Prozess kein lokal erstelltes Tag mehr erfordert.