Add `refs: tags` to prevent Gitlab CI running publish stage on
untagged commits.

When validating the Python package meta data, only check version
format if tagged, since this is how katversion works.  If not
tagged, commits get a version string like `0.3.1.dev39+master.a59d112e`.