Release-process (#91)

* Use full path, since bazel-bin may not exist.

* Validate manifest version during release

.github/workflows/release.yml

@@ -19,15 +19,21 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - uses: bazelbuild/setup-bazelisk@v2
+      - name: Check Manifest
+        run: |
+          MANIFEST_VERSION=$(cat manifest.json | python3 -c "import sys, json; print(json.load(sys.stdin)['version'])")
+          TAG_VERSION=${{ github.ref_name }}
+          test "${MANIFEST_VERSION}" = "${TAG_VERSION}"
       - run: bazel build ...
       - run: bazel test --test_output=errors ...
       - name: Create Release
         uses: softprops/action-gh-release@v1
         with:
           generate_release_notes: true
           fail_on_unmatched_files: true
+          # bazel-bin symlink may not exist
           files: |
-            bazel-bin/chrome-ssh-agent.zip
+            bazel-out/k8-fastbuild/bin/chrome-ssh-agent.zip
       - name: Publish to Webstore
         uses: mnao305/[email protected]
         with: