CI service account allowed to push version tags only.
For more information on the package registry, see the documentation.