Extended Description

Anyone with write (commit) access to a github repository can upload release files, so we should enable notifications when this happens to help catch unauthorized uploads.