Add github action to publish new version

[nnmkhang]

• lock to service account
• https://release-plz.dev/
• Signing off on PR is disabled for this repo, here is a work around:

cargo install release-plz locally and run release-plz update manually, then PR that change. Once it’s merged, the release-plz action is able to do the rest as though its own PR was just merged.

We should configure this after we do our major bump for static link since the new versions for rust-symcrypt and symcrypt-sys will have the workspace changes. Currently release_plz is having an issue picking up the differences.