chore: migrate to reusable publish/docs workflows

[wphillipmoore]

Ref vergil-project/vergil-actions#318

Summary

• Replace repo-local publish.yml with a thin caller to the reusable publish-release.yml workflow, using secrets: inherit to eliminate per-repo secret forwarding
• Replace repo-local docs.yml with a thin caller to the reusable publish-docs.yml workflow, passing only the pre-deploy-command input
• Add [publish] section to standard-tooling.toml declaring release = true and docs = true

Part of vergil-project/vergil-actions#318

Test plan

• CI passes on this branch
• Docs deploy triggers correctly on develop/main push
• Release publish triggers correctly on main push