Trusted-publishing release workflow triggers on v* tags. Requires
one-time trusted publisher setup on pypi.org (documented in the
workflow header).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>