ci: switch release.yml to more common publish.yml

Contains the release and pypi publish and uses the coh common
workflow.

Refs: RATYK-200

Author: nicobav

.github/workflows/publish.yml

@@ -0,0 +1,56 @@
+name: Create release & publish to PyPI
+# If ran manually, e.g. with ref set to "refs/tags/v1.2.3", set the run name to "Publish refs/tags/v1.2.3".
+run-name: ${{ inputs.ref && format('Publish {0}', inputs.ref) || null }}
+
+on:
+  push:
+    branches:
+      - main
+  # Run daily to keep the release PR date current
+  schedule:
+    - cron: '1 0 * * *'
+  workflow_dispatch:
+    inputs:
+      ref:
+        description: "The branch, tag or SHA to publish."
+        required: true
+        type: string
+
+jobs:
+  release-please:
+    uses: City-of-Helsinki/.github/.github/workflows/release-please.yml@main
+    permissions:
+      contents: write
+      pull-requests: write
+    with:
+        include-component-in-tag: false
+
+  build:
+    needs:
+      - release-please
+    uses: City-of-Helsinki/.github/.github/workflows/build-python-dists.yml@main
+    with:
+        ref: ${{ inputs.ref }}
+    # Run build job if a release was created or a ref was specified (i.e. workflow was invoked manually)
+    if: ${{ needs.release-please.outputs.release_created || inputs.ref }}
+
+  publish-to-pypi:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    needs:
+      - build
+    # Run publish job if an artifact was uploaded
+    if: ${{ needs.build.outputs.artifact_name }}
+    environment:
+      name: pypi
+      url: https://pypi.org/p/django-ilmoitin
+    permissions:
+      id-token: write  # mandatory for trusted publishing
+    steps:
+    - name: Download all the dists
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      with:
+        name: ${{ needs.build.outputs.artifact_name }}
+        path: dist/
+    - name: Publish distribution to PyPI
+      uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0