fix(release): pass version-format to the tag job

common-release-tag.yml now validates the version and the ref itself rather than
trusting that prepare validated the same values (CodeQL flagged the privileged
checkout on an unvalidated ref in reqstool/.github#66). Validating the version
needs to know which format to validate against.

Signed-off-by: Jimisola Laursen <jimisola@jimisola.com>

Author: jimisola

.github/workflows/release.yml

@@ -72,6 +72,7 @@ jobs:
       contents: write
     with:
       version: ${{ needs.prepare.outputs.version }}
+      version-format: pep440
       ref: ${{ inputs.ref }}
 
   # Rebuilt from the tag, which is what gives the artifacts their version: