ci: make python-publish a reusable workflow called from release-please

Keeps publish logic in python-publish.yml so the PyPI trusted publisher
config (which matches on job_workflow_ref) remains valid. release-please
calls it via workflow_call when a release is created, avoiding the
GITHUB_TOKEN cross-workflow trigger limitation.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Chris1221

.github/workflows/python-publish.yml

@@ -1,13 +1,9 @@
-# This workflow will upload a Python Package to PyPI when a release is created by release-please
+# This workflow uploads a Python package to PyPI. It is called by release-please.yml
+# when a new release is created.
 name: Publish to PyPI
 
 on:
-  push:
-    tags:
-      - 'v*'
-
-permissions:
-  contents: read
+  workflow_call:
 
 jobs:
   pypi-publish:
@@ -16,7 +12,7 @@ jobs:
       name: pypi
       url: https://pypi.org/p/yamldoc
     permissions:
-      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
 
     steps:
     - uses: actions/checkout@v4

.github/workflows/release-please.yml

@@ -15,7 +15,6 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
-      tag_name: ${{ steps.release.outputs.tag_name }}
     steps:
       - uses: google-github-actions/release-please-action@v4
         id: release
@@ -26,26 +25,6 @@ jobs:
   publish:
     needs: release-please
     if: ${{ needs.release-please.outputs.release_created }}
-    runs-on: ubuntu-latest
-    environment:
-      name: pypi
-      url: https://pypi.org/p/yamldoc
+    uses: ./.github/workflows/python-publish.yml
     permissions:
       id-token: write
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Install Pixi
-        run: |
-          curl -fsSL https://pixi.sh/install.sh | bash
-          echo "$HOME/.pixi/bin" >> $GITHUB_PATH
-
-      - name: Install dependencies
-        run: pixi install
-
-      - name: Build package
-        run: pixi run python -m build
-
-      - name: Publish package to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1