Add github workflows for code checks, build, publish and release.

The workflows are based on the reusable workflows from the
glenn20/python-ci repository.

The pytest tests are ommitted as they require hardware-in-the-loop.
Run the CI tests on your local computer with a serial-attached ESP32
device using tox, eg: `tox -- --port=u0 -xv`, or
`uv run -p 3.12 pytest --port c3 -xv`.

Author: glenn20

.github/workflows/ci-release.yaml

@@ -0,0 +1,54 @@
+name: Publish and Release
+
+#   A github reusable workflow to:
+#   - Run code checks and tests on multiple python versions and platforms;
+#   - Publish a python package to test.pypi.org and pypi.org; and
+#   - Create a GitHub Release.
+#
+#   The workflow is triggered on:
+#   - push to version tags matching "v*", eg. "v1.0.0", or
+#   - manual workflow_dispatch (eg. from the github `Actions` tab):
+#     - will produce a release with a version tag like: "v1.0.1.devN"
+#
+#   Uses reusable workflows from the <https://github.com/glenn20/python-ci>
+#   repository.
+
+on:
+  push:
+    tags: ["v*"]  # Publish on tags matching "v*", eg. "v1.0.0"
+  workflow_dispatch:
+
+jobs:
+  checks:
+    name: Code checks
+    uses: glenn20/python-ci/.github/workflows/check.yaml@v1
+
+  build:
+    name: Build
+    uses: glenn20/python-ci/.github/workflows/build.yaml@v1
+
+  publish-test:
+    name: Publish to test.pypi
+    uses: ./.github/workflows/publish.yaml
+    needs: build
+    with:
+      pypi: test.pypi
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing!
+
+  publish-pypi:
+    name: Publish to pypi
+    uses: ./.github/workflows/publish.yaml
+    needs: build
+    with:
+      pypi: upload.pypi
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing!
+
+  github-release:
+    name: Create GitHub release
+    uses: glenn20/python-ci/.github/workflows/release.yaml@v1
+    needs: build
+    permissions:
+      contents: write  # IMPORTANT: mandatory for github release
+      id-token: write  # IMPORTANT: mandatory for github release

.github/workflows/ci-tests.yaml

@@ -0,0 +1,37 @@
+name: Test and Build
+
+# Run the code checks and CI pytest workflow on
+# - push to `main` or `dev` branches, or
+# - manually triggered from github Actions tab.
+
+# Build and publish to test.pypi on
+# - push to `main` branch.
+
+on:
+  push:
+    branches: [main, dev]
+  workflow_dispatch:
+
+jobs:
+  # Can't run pytest tests as they require hardware-in-the-loop
+  # So, just run check and build tests
+
+  checks:
+    name: Code checks
+    uses: glenn20/python-ci/.github/workflows/check.yaml@v1
+
+  build:
+    name: Build
+    uses: glenn20/python-ci/.github/workflows/build.yaml@v1
+
+  publish-test:
+    name: Publish to test.pypi
+    needs: build
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (github.event_name == 'push' && github.ref == 'refs/heads/main')
+    uses: ./.github/workflows/publish.yaml
+    with:
+      pypi: test.pypi
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing!

.github/workflows/publish.yaml

@@ -0,0 +1,55 @@
+name: Publish python package
+
+# description: |- A github reusable workflow to publish a python package to
+#   pypi.org or test.pypi.org.
+#
+#   Input options:
+#   - `pypi: test.pypi`: Publish to test.pypi.org (default).
+#   - `pypi: upload.pypi`: Publish to pypi.org.
+#
+#   The workflow invokes the github composite action
+#   `glenn20/python-ci/publish@v1` to publish the package.
+#
+#   Requirements:
+#   1. For trusted publishing, the publishing workflow must be in the project
+#      repository, so copy this workflow file to
+#      `.github/workflows/publish.yaml` in your repository.
+#   2. Create the `publish-test.pypi` and `publish-pypi` Environments in your
+#      github repository (Settings->Environments->New Environment).
+#   3. Add this workflow as a "trusted publisher" on your pypi and test.pypi
+#      project pages (add the name of the relevant Environment for additional
+#      access control).
+#   4. Call this workflow from a parent workflow with the `pypi` input set to
+#      "upload.pypi" or "test.pypi" (default).
+#
+#   Invoke with `uses: ./.github/workflows/publish@v1`
+
+on:
+  workflow_call:
+    inputs:
+      pypi:
+        description: 'Publish to `upload.pypi` or `test.pypi`:'
+        default: 'test.pypi'
+        required: false
+        type: string
+  workflow_dispatch:
+    inputs:
+      pypi:
+        description: 'Set to "upload.pypi" or "test.pypi" (default).'
+        options: ['test.pypi', 'upload.pypi']
+        type: choice
+
+jobs:
+  publish:
+    name: Publish to ${{ inputs.pypi }}
+    runs-on: ubuntu-latest
+    environment:
+      name: publish-${{ inputs.pypi }}
+      url: https://${{ inputs.pypi }}.org/p/${{ steps.publish.outputs.package-name }}
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing
+    steps:
+      - uses: glenn20/python-ci/publish@v1
+        id: publish
+        with:
+          pypi: ${{ inputs.pypi }}