ci(rat.yml): fixed rat action

only uses whitelisted actions, runs on both the repo and the release tarball, and triggers on tag creation
1 file changed