workflow/publish: fix errors

* bin/release: config user; fetch tags in ci
* gem: remove mfa requirement
* run: only on lib version changes

Author: gi

.github/workflows/publish.yml

@@ -4,6 +4,8 @@ on:
   push:
     branches:
       - main
+    paths:
+      - lib/**/version
 
 permissions:
   contents: write
@@ -24,7 +26,6 @@ jobs:
       - name: Publish to GitHub
         env:
           GEM_HOST_API_KEY: "Bearer ${{secrets.GITHUB_TOKEN}}"
-          RUBYGEMS_HOST: https://rubygems.pkg.github.com/${{github.repository_owner}}
         run: bin/release
   rubygems:
     name: RubyGems

.rubocop.yml

@@ -10,6 +10,9 @@ AllCops:
     - vendor/**/*
   NewCops: enable
 
+Gemspec/RequireMFA:
+  Enabled: false
+
 Layout/ArgumentAlignment:
   EnforcedStyle: with_fixed_indentation
 

bin/release

@@ -16,4 +16,10 @@ if [[ "${diff}" != "0" ]]; then
   exit 1
 fi
 
+if [[ -n "${CI}" ]]; then
+  git config --global user.email "gi+handlebars-ruby@users.noreply.github.com"
+  git config --global user.name "handlebars-ruby"
+  git fetch --tags
+fi
+
 "${dir}/rake" release

handlebars-engine.gemspec

@@ -20,7 +20,6 @@ Gem::Specification.new do |spec|
   spec.metadata["changelog_uri"] = "#{spec.homepage}/CHANGELOG.md"
   spec.metadata["github_repo"] = spec.homepage
   spec.metadata["homepage_uri"] = spec.homepage
-  spec.metadata["rubygems_mfa_required"] = "true"
   spec.metadata["source_code_uri"] = spec.homepage
 
   spec.files = Dir.chdir(File.expand_path(__dir__)) {