fix: use correct git/refs endpoint for tag creation [skip-version]

- API endpoint should be POST /git/refs (NOT /git/refs/tags/{tagname})
- Body should be {"ref": "refs/tags/{version}", "sha": "..."}
- Previously used wrong URL path + wrong body format

Author: localpibox

.github/workflows/build-and-publish.yml

@@ -155,12 +155,12 @@ jobs:
             echo "Tagging $repo@$VERSION (from $branch)"
             sha=$(git ls-remote "https://github.com/$repo.git" "refs/heads/$branch" | awk '{print $1}')
             if [ -n "$sha" ]; then
-              # Use curl to POST raw JSON (gh api -f sends form-encoded, not JSON)
+              # POST to /git/refs with {ref, sha} body (NOT /git/refs/tags/{tagname})
               status=$(curl -s -o /dev/null -w '%{http_code}' \
-                -X POST "https://api.github.com/repos/$repo/git/refs/refs/tags/$VERSION" \
+                -X POST "https://api.github.com/repos/$repo/git/refs" \
                 -H "Authorization: token $LOCALPIBOX_PAT" \
                 -H "Accept: application/vnd.github+json" \
-                -d "{\"sha\": \"$sha\"}")
+                -d "{\"ref\": \"refs/tags/$VERSION\", \"sha\": \"$sha\"}")
               if [ "$status" = "201" ] || [ "$status" = "422" ]; then
                 echo "  ✅ $repo@$VERSION"
               else