ci: release workflow skeleton

Closes #52

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ulises-jeremias

.github/workflows/publish.yml

@@ -0,0 +1,35 @@
+name: Release
+on:
+  push:
+    tags:
+      - "create-awesome-python-app@*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Tag name (create-awesome-python-app@X.Y.Z)"
+        required: false
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+      - uses: actions/setup-python@v5
+        with:
+          python-version-file: .python-version
+      - run: uv sync --group dev
+      - run: uv build --package create-awesome-python-app
+      - name: Create GitHub Release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v2
+        with:
+          files: dist/*
+      - name: Publish to PyPI (OIDC)
+        if: startsWith(github.ref, 'refs/tags/')
+        run: echo "PyPI trusted publishing wired in #58 — placeholder job"

docs/VERSIONING.md

@@ -0,0 +1,9 @@
+# Versioning
+
+CPA uses **GitHub Releases + tags** with hatchling package versions.
+
+Recommended flow (release-please or manual tags):
+
+1. Bump `version` in package pyproject.toml files
+2. Tag `create-awesome-python-app@X.Y.Z`
+3. `publish.yml` builds and publishes to PyPI via OIDC (see #58)