docs: document release confirmation step

README.md

@@ -47,12 +47,14 @@ sudo ./fullupgrade
 1. checks that the current branch is `dev` for real releases
 2. verifies the working tree is clean
 3. optionally computes a new version from an increment shortcut
-4. switches to `main`
-5. merges `dev` into `main`
-6. pushes `main`
-7. creates an annotated tag
-8. pushes tags
-9. switches back to the original branch on exit
+4. displays the chosen release tag
+5. asks for confirmation before any Git action
+6. switches to `main`
+7. merges `dev` into `main`
+8. pushes `main`
+9. creates an annotated tag
+10. pushes tags
+11. switches back to the original branch on exit
 
 ### Usage
 
@@ -81,6 +83,7 @@ sudo ./fullupgrade
 - `VERSION` is used directly as the tag name.
 - If `VERSION` starts with `+`, it is treated as an increment based on the latest existing tag.
 - `--dry-run` can be used from any branch and only prints the computed tag.
+- In normal mode, the computed tag is shown and a confirmation is required before Git actions run.
 - The script may fail if Git state is unexpected or if a tag already exists.
 - The tag message is automatically generated as `Release <version>`.