Add release CI workflow to build and release universal binary

[s1hofmann]

This PR introduces a dedicated CI workflow for tagged releases.

Not only does it automate releases, it also enables publishing a universal binary which natively runs on both Intel and Apple Silicon machines, not need for Rosetta2.

It achieves this by first building two separate binaries for x64 and arm64 that are later combined into a single fat binary that supports both architectures.

Requirements:

In order to publish new releases, this CI workflow requires a repository secret called NPM_TOKEN which stores an npm automation access token.

How to use:

A new release will be published by pushing a new tag:

git tag -a v2.2.2 -m "Release v2.2.2"
git push --tags

Please note that this workflow will only run on tags that follow the form v*.*.*, e.g. v2.2.2