ci: tag releases automatically

Signed-off-by: NotAShelf <raf@notashelf.dev>
Change-Id: I6a6a6964dc061848bfbda520a4e311c3f9558557

.github/workflows/nix-cache.yaml

@@ -13,7 +13,7 @@ jobs:
   populate-cache:
     runs-on: ubuntu-latest
     steps:
-      - name: "CHeckout"
+      - name: "Checkout"
         uses: actions/checkout@v5
 
       - uses: cachix/install-nix-action@v31
@@ -25,4 +25,5 @@ jobs:
           name: nyx
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
 
-      - run: nix build
+      - name: "Build with Nix"
+        run: nix build

.github/workflows/release.yaml

@@ -9,7 +9,26 @@ permissions:
   contents: write
 
 jobs:
+  tag-release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Read version
+        run: |
+          echo -n "stash_version=v" >> "$GITHUB_ENV"
+          nix run nixpkgs#fq -- -r '.package.version' Cargo.toml >> "$GITHUB_ENV"
+          cat "$GITHUB_ENV"
+
+      - name: Tag
+        run: |
+          set -x
+          git tag $ndg_version
+          git push --tags || :
+
   create-release:
+    needs: tag-release
     runs-on: ubuntu-latest
     outputs:
       upload_url: ${{ steps.create_release.outputs.upload_url }}