ci: add workflow to publish devnotes independently of releases

Adds a GitHub Actions workflow that rebuilds the `latest` docs alias
when devnotes change on main, so blog posts go live without cutting
a package release.

Author: andreatgretel

.github/workflows/publish-devnotes.yml

@@ -0,0 +1,56 @@
+name: Publish devnotes
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "docs/devnotes/**"
+  workflow_dispatch:
+
+jobs:
+  build-notebooks:
+    uses: ./.github/workflows/build-notebooks.yml
+    with:
+      use_cache: true
+    secrets: inherit
+
+  deploy:
+    needs: build-notebooks
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          version: "0.9.5"
+      - name: Set up Python
+        run: uv python install 3.11
+      - name: Install dependencies for docs
+        run: uv sync --all-packages --group docs
+      - name: Download notebooks
+        uses: actions/download-artifact@v7
+        with:
+          name: notebooks
+          path: docs/notebooks
+      - name: Get latest release version
+        run: |
+          LATEST_TAG=$(gh release view --json tagName -q .tagName 2>/dev/null)
+          if [ -z "$LATEST_TAG" ]; then
+            echo "::error::No published release found. Publish a release first."
+            exit 1
+          fi
+          VERSION=$(echo "$LATEST_TAG" | sed 's/^v//' | sed 's/ .*$//')
+          echo "::notice::Rebuilding docs for version $VERSION (latest)"
+          echo "VERSION=$VERSION" >> $GITHUB_ENV
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Setup doc deploy
+        run: |
+          git fetch origin gh-pages --depth=1
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+      - name: Rebuild latest docs
+        run: uv run mike deploy --push --update-aliases ${{ env.VERSION }} latest