Don't do it on main pushes, do it on releases so that main is a "working, but unreleased" branch, then releases are "working published" stamps