[ci] Fix workflow so ‘publish-*’ dependencies can run

This is a documented but bizarre quirk on Circle CI: in order for a job
to run as a dependency of another job that has a filter it must also
have at least one filter of its own, even if the filter is a noop.

https://circleci.com/docs/2.0/workflows/#executing-workflows-for-a-git-tag

.circleci/config.yml

@@ -156,7 +156,10 @@ workflows:
   build:
     jobs:
       - macos-aat-fonts
-      - distcheck
+      - distcheck:
+          filters: # must have filter or won't work as a dependency
+            tags:
+              only: /.*/
       - publish-dist:
           requires:
             - distcheck
@@ -169,8 +172,14 @@ workflows:
       - alpine
      #- archlinux
       - sanitizers
-      - crossbuild-win32
-      - crossbuild-win64
+      - crossbuild-win32:
+          filters: # must have filter or won't work as a dependency
+            tags:
+              only: /.*/
+      - crossbuild-win64:
+          filters: # must have filter or won't work as a dependency
+            tags:
+              only: /.*/
       - publish-win32:
           requires:
             - crossbuild-win32