Cut Release Tag

Cut one signed annotated semver tag from a generated plan. Use the release scripts for tag writes. Use Run Maintainer E2E for maintainer-requested workflow dispatches. Do not improvise tag, push, version-bump, or other release-state GitHub writes.

Treat these as separate states:

• Tag can be cut: the release entry and required image checks pass. The maintainer chooses to proceed with the displayed documentation coverage and general E2E state. The release brief records both decisions and contains no unresolved prompts.
• Tag cut: the remote signed tag exists and peels to the planned candidate.
• Post-tag follow-through: after reporting the tag as cut, continue the same task. Monitor latest, release labels, public documentation, and release images. Draft the Announcement and report lkg state.