When a release is tagged, automatically build the release package and
create a draft of the release. Since the build is automated we are also
performing provenance as per [SLSA3](https://slsa.dev/) and uploading
that as a release asset.
This also fixes a couple of recent issues:
* validation of the packaging itself was broken when we migrated from
cirrus ci to github actions.
* clang32 for msys2 has been deprecated causing building to fail.
Authored-By: Brad House (@bradh352)
Brad House
a5e2761e9b