ci: add workflow_dispatch to publish, fetch tags, handle both triggers

[KochC]

Improvements to publish.yml:

• Add workflow_dispatch trigger so publish can be manually re-run (useful for backfilling missed releases like v1.1.0)
• Add fetch-tags: true to checkout so git tag --points-at HEAD works correctly
• Handle both workflow_run and workflow_dispatch trigger contexts for checkout ref