fix(ci): add local PyPI publish step (#6)

PyPI doesn't support reusable workflows for trusted publishing.
Build stays in org workflow, publish must be local.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lostmygithubaccount

.github/workflows/release-python.yml

@@ -13,8 +13,23 @@ permissions:
   contents: read
 
 jobs:
-  release:
+  build:
     uses: dkdc-io/.github/.github/workflows/release-python.yml@v1
     permissions:
       contents: read
+
+  publish:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
       id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          path: dist
+          merge-multiple: true
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: dist/