Remove tag-and-draft.yml which references OliverMKing/javascript-release-workflow@main
(unmaintained personal repo, last updated Sept 2022). This is superseded by
Azure/action-release-workflows in release-pr.yml.
Pin release-pr.yml to SHA for supply chain safety.