PyPI publishing workflow (OIDC trusted publishers)

[scttfrdmn]

Workflow .github/workflows/publish.yml is in place. Need to register the project as a trusted publisher on PyPI (and TestPyPI for pre-releases) before the first release.

[scttfrdmn]

Workflow (.github/workflows/publish.yml) is in place and correct: uses pypa/gh-action-pypi-publish with id-token: write, split between pypi and testpypi environments keyed off tag suffix.

Remaining manual prerequisites before tagging a release can publish:

1. PyPI: register a pending trusted publisher at https://pypi.org/manage/account/publishing/ with:

   • Owner: trnsci
   • Repository: trnsolver
   • Workflow: publish.yml
   • Environment: pypi

2. TestPyPI: same at https://test.pypi.org/manage/account/publishing/ with environment testpypi.

3. GitHub: create the two environments in repo Settings → Environments (pypi, testpypi). Optionally add required reviewers.

Only github-pages is registered today. Once 1–3 are done, gh release create vX.Y.Z --generate-notes will auto-publish via OIDC with no API tokens needed.

Leaving this issue open until a release actually publishes successfully.

[scttfrdmn]

Trusted publisher registered on PyPI; v0.3.0 published successfully via OIDC (no secrets, no API token). https://pypi.org/project/trnsolver/0.3.0/