ci: publish workflows for the Python + TS SDKs

- publish-python.yml: on a python-v* tag, test + build + twine upload to PyPI (needs PYPI_API_TOKEN)
- publish-ts.yml: on a ts-v* tag, npm ci + test + npm publish --access public (needs NPM_TOKEN)
Decoupled from the daemon's v* release tags; SDKs version independently (0.1.0). Integration tests
auto-skip in CI (no sentry binary).

Author: RoyLin

.github/workflows/publish-python.yml

@@ -0,0 +1,33 @@
+name: publish-python
+
+# Publish the Python SDK to PyPI on a `python-vX.Y.Z` tag (independent of the daemon's `v*` tags).
+# Requires a `PYPI_API_TOKEN` repository secret.
+on:
+  push:
+    tags: ["python-v*"]
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: sdk/python
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: test
+        run: python -m unittest discover -s tests -t . # integration tests auto-skip (no binary)
+      - name: build
+        run: |
+          pip install --upgrade build twine
+          python -m build
+      - name: publish
+        run: twine upload dist/*
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}

.github/workflows/publish-ts.yml

@@ -0,0 +1,30 @@
+name: publish-ts
+
+# Publish the TypeScript SDK (@a3s-lab/sentry) to npm on a `ts-vX.Y.Z` tag (independent of the
+# daemon's `v*` tags). Requires an `NPM_TOKEN` repository secret.
+on:
+  push:
+    tags: ["ts-v*"]
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: sdk/typescript
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          registry-url: "https://registry.npmjs.org"
+      - run: npm ci
+      - name: build + test
+        run: npm test # tsc + node --test; the integration test auto-skips (no binary)
+      - name: publish
+        run: npm publish --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}