Support Immutable releases

[silverwind]

Feature Description

https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases#what-immutable-releases-protect

Main properties of immutable releases:

1. Git tags cannot be moved or deleted
2. Release assets cannot be modified or deleted
3. Automatically generates a release attestation
4. Protection against repository resurrection attacks

Immutable tags is useful for actions and go modules.

[bircni]

100%

[silverwind]

1 and 2 provide the most value and should be easy to implement. Should do both in 1 PR.

[bircni]

You can just enable that in the GitHub Repo settings

[silverwind]

You are missing the point. The point is to implement this feature in Gitea.