Hacker News Reader

... and then use a second, different automation to deploy that into production?

That seems a little backwards for a small web app.

I use different workflows for commit verification and release automation, yes. Some things are actually simpler that way.

The creation of a tag can presumably trigger actions.