- Add version-check job that verifies Cargo.toml, pyproject.toml, and
  r-package/DESCRIPTION all match the git tag before anything runs
- Add pypi-build job with 5-platform wheel matrix (Linux x86_64/aarch64,
  macOS Intel/ARM, Windows) using PyO3/maturin-action
- Add pypi-sdist job for source distribution
- Add pypi-publish job using OIDC trusted publishing (no API token needed)
- crates.io and PyPI builds run in parallel after CI gates pass
- GitHub Release now waits for both registries and attaches wheel artifacts
- Removed redundant inline version check from publish job (now in version-check)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>