Add github tag protection rules after release candidate

[mdedetrich]

iirc This is one of the pekko modules that actually needs a git tag to function (hence why the v0.0.0 tag already exists). Due to this we cannot add git tag protection rules now because we would be unable to delete the v0.0.0 tag).

Instead after the first release candidate is made and a git tag for that release candidate is pushed, we can then delete the v0.0.0 git tag and then add git tag protection rules.