Before bumping the package version and creating the tag, verify that:

 - Git is set up to create signed tags

 - GITHUB_TOKEN is set to an access token with permissions to push to
   the hypothesis/client repository