fix release workflow

[imjasonh]

This breaks because the release doesn't have a built ko binary yet.

This only runs publish after the goreleaser job has finished and binaries are available.

I think we could also just remember not to check "this is the latest release" when cutting a new release, but I will never remember to do that.

For this release I'm just going to retry the failed job after goreleaser finishes.

[codecov-commenter]

Codecov Report

Merging #977 (4d713c0) into main (8e075ae) will not change coverage.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@           Coverage Diff           @@
##             main     #977   +/-   ##
=======================================
  Coverage   52.50%   52.50%           
=======================================
  Files          43       43           
  Lines        3331     3331           
=======================================
  Hits         1749     1749           
  Misses       1353     1353           
  Partials      229      229           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

[developer-guy]

lgtm