chore(ci): push git tag after web release

.github/workflows/web.yml

@@ -174,3 +174,24 @@ jobs:
 #          aws cloudfront create-invalidation \
 #            --distribution-id ${AWS_CLOUDFRONT_DISTRIBUTION_ID} \
 #            --paths "/*"
+
+      - name: "Create and push git tag"
+        if: ${{ endsWith(github.ref, '/release') }}
+        run: |
+          curl -fsSL "https://github.com/cli/cli/releases/download/v2.10.1/gh_2.10.1_linux_amd64.tar.gz" | tar xz -C "${HOME}/bin" --strip-components=2 gh_2.10.1_linux_amd64/bin/gh
+
+          git config user.email "nextstrainbot@nextstrain.org"
+          git config user.name "nextstrain-bot"
+
+          pushd packages_rs/nextclade-web  >/dev/null
+
+          export version=$(node -e "\
+            const semver = require('semver'); \
+            const pkg = require('./package.json'); \
+            console.log(pkg.version) \
+          ")
+
+          popd >/dev/null
+
+          git tag "web-${version}"
+          git push origin "web-${version}"