[Improvement] Rather than store artifacts in the accepted_roots dir, upload them to Github as a Release

[jcjones]

Bug Report

It's generally a good idea to not put final artifacts into a Git repo, but I am approving PR #1 as-is, as it has all the bones we want.

In the future, we should rework the scripts to write the final output to a tempdir, tar it up, and use a CLI tool (like the Github one) to submit the tarball as a release artifact. It could even be done by a Github action.

Then the far end of the k8s tooling should look for those releases instead.