ci: gate PyPI publish workflows on CI passing (#18)

* Initial plan

* Make publish to PyPI steps dependent on CI (test and linting) job passing

- Add workflow_call trigger to ci.yml for reusable workflow support
- Gate build job in publish-to-pypi.yml on CI passing
- Gate publish job in release.yml on CI passing

Co-authored-by: deviantintegral <255023+deviantintegral@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: deviantintegral <255023+deviantintegral@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -3,6 +3,7 @@ on:
   push:
     branches: [main]
   pull_request:
+  workflow_call:
 
 jobs:
   lint-and-test:

.github/workflows/publish-to-pypi.yml

@@ -7,7 +7,13 @@ on:
     types: [published]
 
 jobs:
+  ci:
+    uses: ./.github/workflows/ci.yml
+    permissions:
+      contents: read
+
   build:
+    needs: ci
     runs-on: ubuntu-latest
     permissions:
       contents: read

.github/workflows/release.yml

@@ -9,6 +9,9 @@ permissions:
   id-token: write
 
 jobs:
+  ci:
+    uses: ./.github/workflows/ci.yml
+
   release-please:
     runs-on: ubuntu-latest
     outputs:
@@ -20,7 +23,7 @@ jobs:
           release-type: python
 
   publish:
-    needs: release-please
+    needs: [ci, release-please]
     if: ${{ needs.release-please.outputs.release_created }}
     runs-on: ubuntu-latest
     environment: pypi