ci: publish validated artifacts from CI

[Seddryck]

Summary

• make publication the final gated job in ci.yml
• publish the aggregated artifacts produced and validated earlier in the same workflow run
• retain patch-zero eligibility, main-only publication, GitHub release creation, and NuGet trusted publishing
• remove the redundant release.yml workflow and its cross-run coordination
• update the trusted-publishing documentation to reference ci.yml

Why

CI and release were separate even though publication is automatic after successful validation. Keeping publication in the same workflow removes duplicated builds, exact-SHA lookup and polling, and cross-run artifact handling while preserving byte-for-byte artifact promotion.

Validation

• parsed .github/workflows/ci.yml with PyYAML
• ran git diff --check
• ran Assert-MainPublication.ps1 with refs/heads/main
• verified publication depends on the CI gate and consumes the same-run packages-{semver} artifact
• verified the publication job does not invoke native or package build scripts

close #85

[coderabbitai]

Important

Review available on request

• 🔍 Trigger review

Reviews should be triggered manually for repositories with fewer than 10 stars. Select Trigger review above or comment @coderabbitai review to review the latest changes. For a full review, comment @coderabbitai full review.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9950f5ae-a097-466b-9147-a95bb2da6875

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}