release gh action improvements

[dani-santos-code]

Discovered in: #539 (review)

thank you @thepwagner ! let's salsify this thing! 🌶️

Pete Wagner has given me great feedback on how to improve our release action. Opening this issue so we keep track of it and address it in a separate PR.

Things we'd like to do:

• sign our binaries. Pete suggested using fulcio!
• we might need to add sigstore/cosign-installer to the worfklow. example
• track the semver tag in a comment, so dependabot should update both!
  example / build(deps): bump actions/checkout from 3.4.0 to 3.5.0 hansel#111.

For more details, please refer to this PR and the discussions we had there!