Use double-quotes for GITHUB_REF_NAME shell variable.

This properly expands it.

Author: tim-schilling

.github/workflows/release.yml

@@ -83,7 +83,7 @@ jobs:
         GITHUB_TOKEN: ${{ github.token }}
       run: >-
         gh release create
-        '${GITHUB_REF_NAME}'
+        "${GITHUB_REF_NAME}"
         --repo '${{ github.repository }}'
         --notes ""
     - name: Upload artifact signatures to GitHub Release
@@ -94,7 +94,7 @@ jobs:
       # sigstore-produced signatures and certificates.
       run: >-
         gh release upload
-        '${GITHUB_REF_NAME}' dist/**
+        "${GITHUB_REF_NAME}" dist/**
         --repo '${{ github.repository }}'
 
   publish-to-testpypi: