CI: Add skip-publish validation mode + move to latest actions/*

[akr-amd]

Summary

• Add a skip-publish workflow_dispatch input for release validation runs that build distributions without uploading to PyPI.
• Skip the PyPI publish job when requested, then verify installation from the release artifact.
• Update first-party GitHub Actions to latest release tags checked from GitHub releases/web search: checkout v7.0.0, setup-python v6.3.0, upload-artifact v7.0.1, download-artifact v8.0.1, configure-pages v6.0.0, upload-pages-artifact v5.0.0, deploy-pages v5.0.0.

Test plan

• git diff --check origin/master...HEAD
• Cursor lints for edited workflow files
• poetry run pytest chipscopy/tcf/tests (not run locally: poetry is not installed)
• python -m pytest chipscopy/tcf/tests (not run locally: pytest is not installed)

[Copilot]

Pull request overview

This PR extends the external PyPI publishing workflow to support a “build-only” validation run that produces release distributions, skips uploading to PyPI, and instead verifies installation directly from the build artifact. This fits the repo’s release automation by enabling pre-publish validation without exercising trusted publishing.

Changes:

• Adds a skip-publish workflow_dispatch boolean input to toggle “build + validate only” runs.
• Gates the pypi-publish job behind skip-publish, and adjusts verify-install to run for both publish and skip-publish paths.
• When skip-publish is enabled, downloads the release-build artifact and installs the wheel locally instead of installing from Test/Prod PyPI.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.