Make publish pipeline create draft GitHub releases (#1965)

If something goes wrong with the maven publish, we can delete the
draft and try again.

.github/jobs/GithubRelease.pkl

@@ -30,6 +30,7 @@ fixed job {
       run =
         #"""
         gh release create ${TAG_NAME} \
+          --draft \
           --title "${TAG_NAME}" \
           --target "${GIT_SHA}" \
           --verify-tag \

.github/workflows/release.yml

@@ -1337,6 +1337,7 @@ jobs:
         GH_REPO: ${{ github.repository }}
       run: |-
         gh release create ${TAG_NAME} \
+          --draft \
           --title "${TAG_NAME}" \
           --target "${GIT_SHA}" \
           --verify-tag \