CI updates for release

Closes #1171

- Publish docker images -> ghcr.io
- Deduplicate / normalize build and publish logic
- Make sure release branches are getting verified correctly

Closes #1184

- Cryptol binaries are no longer included in release tarballs

Closes #982

- Clean version numbers for release

.github/ci.sh

@@ -119,14 +119,15 @@ build() {
   cp cabal.GHC-"$ghc_ver".config cabal.project.freeze
   cabal v2-update
   cabal v2-configure -j --enable-tests
+  git status --porcelain
   pkgs=(saw)
   if $IS_WIN; then
     echo "flags: -builtin-abc" >> cabal.project.local
     echo "constraints: cryptol-saw-core -build-css" >> cabal.project.local
   else
     pkgs+=(saw-remote-api)
   fi
-  tee -a cabal.project > /dev/null < cabal.project.ci
+  tee -a cabal.project.local > /dev/null < cabal.project.ci
   if ! retry cabal v2-build "$@" "${pkgs[@]}"; then
     if [[ "$RUNNER_OS" == "macOS" ]]; then
       echo "Working around a dylib issue on macos by removing the cache and trying again"
@@ -193,12 +194,9 @@ sign() {
 }
 
 zip_dist() {
-  : "${VERSION?VERSION is required as an environment variable}"
-  name="${name:-"saw-$VERSION-$RUNNER_OS-x86_64"}"
-  mv dist "$name"
+  name="$1"
+  cp -r dist "$name"
   tar -czf "$name".tar.gz "$name"
-  sign "$name".tar.gz
-  [[ -f "$name".tar.gz.sig ]] && [[ -f "$name".tar.gz ]]
 }
 
 output() { echo "::set-output name=$1::$2"; }