Only publish to Central from v* tags #118

build-all-and-publish.yml publishes on release: published, or on workflow_dispatch with publish=true (conditions at ~216 and ~285). A dispatch from a branch deploys X.Y.Z-SNAPSHOT. From a detached commit, the maven-git-versioning extension produces a commit-hash version, and releases on Central can never be removed.

Guard both publish conditions, and their negated counterparts:

if: github.event_name == 'release' || (inputs.publish && startsWith(github.ref, 'refs/tags/v'))

Release events have github.ref = refs/tags/v…, so the normal release flow is unchanged.