See https://github.com/project-kessel/kessel-sdk-browser. By March 31 we are being asked to enable branch protection rules on all our repos.

Currently, our GitHub Actions release workflow relies on being able to push git tags to track versions for NX release. We need to:

1. Verify that tag pushing works with branch protection enabled
2. If tags are blocked, obtain bot credentials with bypass permissions
3. Update the release workflow accordingly