Tweak push rules for release build

.github/workflows/wheels.yml

@@ -7,6 +7,8 @@ on:
   push:
     branches:
       - main
+    tags:
+      - v**
   release:
     types:
       - published
@@ -112,6 +114,7 @@ jobs:
 
   upload_pypi:
     # TODO: create an sdist that can build without a custom environment
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
     needs: [build_wheels] 
     runs-on: ubuntu-latest
     strategy:
@@ -132,7 +135,6 @@ jobs:
     environment: pypi
     permissions:
       id-token: write
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
     steps:
       - uses: actions/download-artifact@v3
         with: