Triggers on version tags (v*). Uses OIDC trusted publishing —
no API token needed, just configure the GitHub environment
"pypi" in the repo and add it as a trusted publisher on PyPI.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>