ci: also build .deb package for tagged releases automatically
The 2 rules (yes, it's not just one) say that if commit has a tag associated with it, create this job with default condition (i.e. on_success, which runs it automatically if the previous stage succeeds). Otherwise create this job, but only run it manually.