Builds the dashboard bundle and wheel/sdist, verifies the tag matches the
package version, runs the release smoke, and publishes to PyPI via OIDC
trusted publishing (no stored token) from the `pypi` environment.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>