ci: add tag-triggered npm publish and build check workflows