You just set two remotes locally, create a tag and push just the tag to upstream. You can definitely do it locally, and I think GitHub doesn’t prevent such pushes either.
a) you'd need write permissions for the original remote
b) even if you did, that'd push the commit to the original repo with the tags