ci: restructure publish-python to reduce duplication

Instead of having two mostly-identical jobs for publishing to PyPI
(one for prod one for test), have one job and take an environment
selector as a workflow input.

Author: johnbartholomew

Diff for: .github/workflows/publish-python.yml

@@ -12,10 +12,13 @@ on:
         description: "Upload generate package files to PyPI"
         required: true
         type: boolean
-      use_prod_pypi:
-        description: "Use production PyPI not Test PyPI"
-        required: false
-        type: boolean
+      pypi_environment:
+        description: "Which PyPI instance to publish to"
+        required: true
+        type: choice
+        options:
+          - testpypi
+          - pypi
 
 jobs:
   build_sdist:
@@ -72,17 +75,17 @@ jobs:
           path: ./wheelhouse/*.whl
           if-no-files-found: error
 
-  upload_to_prod_pypi:
-    name: Upload packages to PyPI
+  upload_to_pypi:
+    name: "Upload packages to PyPI"
     needs: [build_sdist, build_wheels]
     runs-on: ubuntu-24.04
-    if: "${{ inputs.upload_to_pypi && inputs.use_prod_pypi && startsWith(github.ref, 'refs/tags') }}"
+    if: "${{ inputs.upload_to_pypi }}"
     permissions:
       contents: read
       id-token: write # Needed for PyPI Trusted Publishing
     environment:
-      name: pypi
-      url: https://pypi.org/p/jsonnet
+      name: "${{ inputs.pypi_environment }}"
+      url: "${{ inputs.pypi_environment == 'pypi' && 'https://pypi.org/p/jsonnet' || 'https://test.pypi.org/p/jsonnet' }}"
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -98,38 +101,8 @@ jobs:
           find cibw-wheels/ -type f -name '*.whl' -exec mv '{}' ./dist/ ';'
           find sdist/ -type f -name '*.gz' -exec mv '{}' ./dist/ ';'
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
-        with:
-          print-hash: true
-
-  upload_to_test_pypi:
-    name: Upload packages to TEST PyPI
-    needs: [build_sdist, build_wheels]
-    runs-on: ubuntu-24.04
-    if: "${{ inputs.upload_to_pypi && !inputs.use_prod_pypi }}"
-    permissions:
-      contents: read
-      id-token: write # Needed for PyPI Trusted Publishing
-    environment:
-      name: testpypi
-      url: https://test.pypi.org/p/jsonnet
-    steps:
-      - uses: actions/download-artifact@v4
-        with:
-          path: cibw-wheels
-          pattern: cibw-wheels-*
-      - uses: actions/download-artifact@v4
-        with:
-          path: sdist
-          name: sdist
-      - name: Flatten wheels to one directory
-        run: |
-          mkdir dist
-          find cibw-wheels/ -type f -name '*.whl' -exec mv '{}' ./dist/ ';'
-          find sdist/ -type f -name '*.gz' -exec mv '{}' ./dist/ ';'
-      - name: Publish to TEST PyPI
         uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
         with:
           verbose: true
           print-hash: true
-          repository-url: https://test.pypi.org/legacy/
+          repository-url: "${{ inputs.pypi_environment == 'testpypi' && 'https://test.pypi.org/legacy/' || '' }}"