Update release process
It occurred to me that our documentation and tooling for doing releases is set up purely for normal, public releases, and that it would be good to provide more support for security releases.
This MR changes some documentation and removes make release
in favor of make tag
which tags but does not push.