Security release: prevents checkout package shadowing in the composite Action; adds strict agent-completion evidence fixtures; and introduces an isolated, OIDC-based PyPI publisher with immutable Action pins and a hash-pinned build backend. See CHANGELOG.md for the full release notes.