Hacker News Reader

I would just create a github release or a particular style of git tag.

... and then use a second, different automation to deploy that into production?

That seems a little backwards for a small web app.

The creation of a tag can presumably trigger actions.

I use different workflows for commit verification and release automation, yes. Some things are actually simpler that way.