Limited release script to only draft releases

We probably always want a human involved in the final step of publishing
a release. 1. To allow editing of the release notes before notifying
users, and 2. to avoid any issues with rogue scripts (who doesn't want
1000 release notifications?).

Especially now that releases may trigger additional post-release
scripts.

.github/workflows/release.yml

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 055b54a..5b33f28 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -254,7 +254,7 @@
               tag_name: env.LFS_VERSION,
               name: env.LFS_VERSION | rtrimstr(".0"),
               target_commitish: "${{github.event.workflow_run.head_sha}}",
-              draft: env.LFS_VERSION | endswith(".0"),
+              draft: true,
               body: $release,
             }' | tee /dev/stderr)"