ci(server): publish agent-control-server to PyPI (#210)

## Summary
The release workflow stages \`server/dist/\` and uploads it to GitHub
release assets, but does not currently push the server wheel to PyPI.
Models, evaluators, and the SDK are published; the server is not.

This change adds a \`publish-server\` job between \`publish-evaluators\`
and \`publish-sdk\`, matching the pattern of the other publish jobs.

## Scope
- User-facing/API changes: \`agent-control-server\` becomes installable
via \`pip install agent-control-server\` after the next release.
- Internal changes: dependency chain in the workflow updated to
evaluators -> server -> sdk (server depends on evaluators at runtime, so
evaluators publishes first).
- Out of scope: anything outside the release workflow.

Author: abhinav-galileo

.github/workflows/release.yaml

@@ -92,7 +92,7 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: release-dists
-          path: .
+          path: release-dists
 
       - name: Publish agent-control-models to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
@@ -113,7 +113,7 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: release-dists
-          path: .
+          path: release-dists
 
       - name: Publish evaluator distributions to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
@@ -122,6 +122,30 @@ jobs:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}
 
+  publish-server:
+    runs-on: ubuntu-latest
+    needs: [release, publish-evaluators]
+    if: >-
+      always() &&
+      needs.release.outputs.released == 'true' &&
+      needs.publish-evaluators.result == 'success'
+    permissions:
+      id-token: write
+
+    steps:
+      - name: Download built distributions
+        uses: actions/download-artifact@v4
+        with:
+          name: release-dists
+          path: release-dists
+
+      - name: Publish agent-control-server to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: release-dists/server/dist/
+          user: __token__
+          password: ${{ secrets.PYPI_API_TOKEN }}
+
   publish-sdk:
     runs-on: ubuntu-latest
     needs: [release, publish-evaluators]
@@ -137,7 +161,7 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: release-dists
-          path: .
+          path: release-dists
 
       - name: Publish agent-control-sdk to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
@@ -148,8 +172,10 @@ jobs:
 
   upload-release-assets:
     runs-on: ubuntu-latest
-    needs: [release, publish-sdk]
-    if: needs.release.outputs.released == 'true'
+    needs: [release, publish-models, publish-evaluators, publish-server, publish-sdk]
+    if: >-
+      always() &&
+      needs.release.outputs.released == 'true'
     permissions:
       contents: write
 
@@ -158,7 +184,7 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: release-dists
-          path: .
+          path: release-dists
 
       - name: Upload to GitHub Release
         uses: python-semantic-release/upload-to-gh-release@main