Resolve annotated tag events before CI delivery

docs/release.md

@@ -104,7 +104,9 @@ Woodpecker runs ReleaseKit's `ci-deliver` command for tags under
 - `SHA256SUMS`
 
 Before running Go, the workflow fetches and verifies the event tag, checks it
-out detached, and confirms the source tree is clean. It copies the tagged
+out detached, and confirms the source tree is clean. It peels the event object
+ID to its commit before comparing it with the tag's commit, accepting both
+annotated tag objects and commit IDs from Woodpecker. It copies the tagged
 `go.mod` and `go.sum` into temporary module metadata outside the checkout. Go
 confirms that this configuration selects ReleaseKit, then builds its CLI using
 an alternate `-modfile`. The bootstrap executable and temporary files remain
@@ -120,7 +122,7 @@ The resulting executable receives:
 "$${bootstrap_dir}/releasekit" ci-deliver \
   --repo "$${CI_WORKSPACE}" \
   --prepared \
-  --commit "$${CI_COMMIT_SHA}" \
+  --commit "$${expected_commit}" \
   "$${CI_COMMIT_TAG}"
 ```