[build] Move the tagging step to the end

Now part of publish (milestone/release) jobs, instead of prepare.
The `fullVersion` is added to output of prepare.

See reactor/reactor#699.

.github/workflows/publish.yml

@@ -14,6 +14,7 @@ jobs:
     runs-on: ubuntu-20.04
     outputs:
       versionType: ${{ steps.version.outputs.versionType }}
+      fullVersion: ${{ steps.version.outputs.fullVersion }}
     steps:
       - uses: actions/checkout@v2
       - name: setup java
@@ -29,13 +30,6 @@ jobs:
       - name: run checks
         id: checks
         run: ./gradlew check
-      - name: tag
-        if: steps.version.outputs.versionType == 'RELEASE' || steps.version.outputs.versionType == 'MILESTONE'
-        run: |
-          git config --local user.name 'reactorbot'
-          git config --local user.email '[email protected]'
-          git tag -m "Release version ${{ steps.version.outputs.fullVersion }}" v${{ steps.version.outputs.fullVersion }} ${{ github.sha }}
-          git push --tags
 
   #deploy the snapshot artifacts to Artifactory
   deploySnapshot:
@@ -76,6 +70,12 @@ jobs:
           ORG_GRADLE_PROJECT_signingPassword: ${{secrets.SIGNING_PASSPHRASE}}
         run: |
           ./gradlew assemble sign artifactoryPublish -Partifactory_publish_contextUrl=https://repo.spring.io -Partifactory_publish_repoKey=libs-milestone-local
+      - name: tag
+        run: |
+          git config --local user.name 'reactorbot'
+          git config --local user.email '[email protected]'
+          git tag -m "Release milestone ${{ needs.prepare.outputs.fullVersion }}" v${{ needs.prepare.outputs.fullVersion }} ${{ github.sha }}
+          git push --tags
 
   #sign the release artifacts and deploy them to Artifactory
   deployRelease:
@@ -99,6 +99,12 @@ jobs:
           ORG_GRADLE_PROJECT_sonatypePassword: ${{secrets.SONATYPE_PASSWORD}}
         run: |
           ./gradlew assemble sign artifactoryPublish -Partifactory_publish_contextUrl=https://repo.spring.io  -Partifactory_publish_repoKey=libs-release-local publishMavenJavaPublicationToSonatypeRepository
+      - name: tag
+        run: |
+          git config --local user.name 'reactorbot'
+          git config --local user.email '[email protected]'
+          git tag -m "Release version ${{ needs.prepare.outputs.fullVersion }}" v${{ needs.prepare.outputs.fullVersion }} ${{ github.sha }}
+          git push --tags
 
 # For Gradle configuration of signing, see https://docs.gradle.org/current/userguide/signing_plugin.html#sec:in-memory-keys
 # publishMavenJavaPublicationToSonatypeRepository only sends to a staging repository