Add manual publish trigger for PyPI

Add workflow_dispatch input `publish` (default: false) and guard the publish job so it runs only on v* tag pushes or when manually triggered with `publish` set to 'true'. This prevents accidental PyPI publishes from arbitrary manual workflow runs.

Author: Einswilli

.github/workflows/publish.yml

@@ -4,11 +4,18 @@ on:
   push:
     tags:
       - 'v*'
+  workflow_dispatch:
+    inputs:
+      publish:
+        description: "Publish to PyPI"
+        required: false
+        default: "false"
 
 jobs:
   build-and-publish:
     name: Build and Publish to PyPI
     runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/v') || (github.event_name == 'workflow_dispatch' && inputs.publish == 'true')
 
     steps:
       - name: Checkout code