fix: create tag only after successful Maven Central deploy

- Use dry_run: true for version auto-detection
- Move tag creation after JReleaser deploy step
- Tag is only pushed if deploy succeeds

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: deblockt

.github/workflows/release.yml

@@ -37,13 +37,7 @@ jobs:
           default_bump: patch
           release_branches: master
           tag_prefix: ""
-
-      - name: Manual version
-        id: manual
-        if: ${{ inputs.version }}
-        run: |
-          git tag "${{ inputs.version }}"
-          git push origin "${{ inputs.version }}"
+          dry_run: true
 
       - name: Set release tag
         id: release
@@ -66,6 +60,11 @@ jobs:
           JRELEASER_GPG_SECRET_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
           JRELEASER_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Create and push tag
+        run: |
+          git tag "${{ steps.release.outputs.tag }}"
+          git push origin "${{ steps.release.outputs.tag }}"
+
       - name: Create GitHub Release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}