build: set up separate publish jobs

[theetrain]

One for stable and one for next tags.

• conditionally run a publish job that sets --tag next when the Git tag includes the string -next; otherwise use latest by default