Add trusted publishing release workflow

Author: tconley1428

.github/actions/release-smoke-package/action.yml

@@ -0,0 +1,94 @@
+name: Release package smoke test
+description: Install a published temporalio package and run a minimal SDK workflow.
+inputs:
+  version:
+    description: "Package version to install and verify"
+    required: true
+  index-url:
+    description: "Primary package index URL"
+    required: true
+  extra-index-url:
+    description: "Optional fallback package index URL"
+    required: false
+    default: ""
+runs:
+  using: composite
+  steps:
+    - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+      with:
+        python-version: "3.10"
+    - name: Install package
+      shell: bash
+      env:
+        VERSION: ${{ inputs.version }}
+        INDEX_URL: ${{ inputs.index-url }}
+        EXTRA_INDEX_URL: ${{ inputs.extra-index-url }}
+      run: |
+        set -euo pipefail
+        python -m venv .venv
+        .venv/bin/python -m pip install --upgrade pip
+
+        install_args=(--prefer-binary --index-url "$INDEX_URL")
+        if [[ -n "$EXTRA_INDEX_URL" ]]; then
+          install_args+=(--extra-index-url "$EXTRA_INDEX_URL")
+        fi
+
+        .venv/bin/python -m pip install "${install_args[@]}" "temporalio==$VERSION"
+    - name: Run SDK smoke test
+      shell: bash
+      env:
+        VERSION: ${{ inputs.version }}
+      run: |
+        set -euo pipefail
+        .venv/bin/python - <<'PY'
+        import asyncio
+        import os
+        import uuid
+        from datetime import timedelta
+
+        import temporalio
+        from temporalio import activity, workflow
+        from temporalio.testing import WorkflowEnvironment
+        from temporalio.worker import UnsandboxedWorkflowRunner, Worker
+
+        expected_version = os.environ["VERSION"]
+        if temporalio.__version__ != expected_version:
+            raise RuntimeError(
+                f"Expected temporalio {expected_version}, got {temporalio.__version__}"
+            )
+
+        @activity.defn
+        async def say_hello(name: str) -> str:
+            return f"Hello, {name}!"
+
+        @workflow.defn
+        class SmokeWorkflow:
+            @workflow.run
+            async def run(self, name: str) -> str:
+                return await workflow.execute_activity(
+                    say_hello,
+                    name,
+                    start_to_close_timeout=timedelta(seconds=10),
+                )
+
+        async def main() -> None:
+            task_queue = f"release-smoke-{uuid.uuid4()}"
+            async with await WorkflowEnvironment.start_local() as env:
+                async with Worker(
+                    env.client,
+                    task_queue=task_queue,
+                    workflows=[SmokeWorkflow],
+                    activities=[say_hello],
+                    workflow_runner=UnsandboxedWorkflowRunner(),
+                ):
+                    result = await env.client.execute_workflow(
+                        SmokeWorkflow.run,
+                        "trusted publishing",
+                        id=task_queue,
+                        task_queue=task_queue,
+                    )
+            if result != "Hello, trusted publishing!":
+                raise RuntimeError(f"Unexpected workflow result: {result!r}")
+
+        asyncio.run(main())
+        PY