Configure pushChanges for maven-release-plugin: a tag can be verified before pushing upstream, but manual push will be required when releasing