GitHub deploy

## Operating
- put `release` at master
- go to actions and publish from release branch
- when done, put `master` to `release`

## Initial setup
- Go to https://github.com/settings/tokens?type=beta
- Generate new fine-grained access token named `$repo-yyyy`
- Expiration custom ${today + one year}
- Resource owner DiffPlug
- Only select repositories -> pick the repo it will be used for
- Permissions -> content RW
- Create token
- Copy it into as repository secret named `GH_TOKEN` https://github.com/diffplug/`$REPO`/settings/secrets/actions
- TODO: create repo environment that required my approval, put GH_TOKEN into that
- Go to https://github.com/organizations/diffplug/settings/secrets/actions and give access to
- NEXUS_USER
- NEXUS_PASS64
- GPG_PASSPHRASE
- GPG_KEY64
- GRADLE_KEY
- GRADLE_SECRET