chore: import upstream snapshot with attribution

.github/workflows/python-publish.yml

@@ -0,0 +1,100 @@
+name: Python Publish (pypi)
+
+on:
+  release:
+    types: [created]
+  push:
+    branches: [main]
+
+env:
+  PYTHON_VERSION: "3.13"
+
+jobs:
+  publish:
+    name: Upload release to PyPI
+    if: github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+
+    environment:
+      name: pypi
+    permissions:
+      id-token: write
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
+
+      - name: Install dependencies
+        shell: bash
+        run: uv sync --all-packages
+
+      - name: Export Publication Version
+        run: echo "version=$(uv version --short)" >> $GITHUB_OUTPUT
+
+      - name: Build Distributable
+        shell: bash
+        run: uv run poe build
+
+      - name: Inspect all distribution members and metadata
+        shell: bash
+        run: |
+          python - <<'PY'
+          import glob, zipfile, tarfile, re
+
+          print("\n=== FILES IN dist/ ===")
+          for f in glob.glob("dist/*"):
+            print(" ", f)
+
+          print("\n=== WHEELS ===")
+          for whl in glob.glob("dist/*.whl"):
+            print("\n---", whl, "---")
+            with zipfile.ZipFile(whl) as z:
+              for name in z.namelist():
+                print(name)
+
+              metas = [n for n in z.namelist() if n.endswith(".dist-info/METADATA")]
+              for meta in metas:
+                print("\n[METADATA:", meta, "]")
+                text = z.read(meta).decode("utf-8", "replace")
+
+                name_m = re.search(r"^Name:\s*(.+)$", text, re.M)
+                ver_m  = re.search(r"^Version:\s*(.+)$", text, re.M)
+
+                if name_m:
+                  print("Project Name:", name_m.group(1))
+                if ver_m:
+                  print("Version:", ver_m.group(1))
+
+          print("\n=== SDISTS ===")
+          for sdist in glob.glob("dist/*.tar.gz"):
+            print("\n---", sdist, "---")
+            with tarfile.open(sdist, "r:gz") as t:
+              for m in t.getmembers():
+                print(m.name)
+
+              metas = [m for m in t.getmembers() if m.name.endswith("PKG-INFO")]
+              for m in metas:
+                print("\n[PKG-INFO:", m.name, "]")
+                text = t.extractfile(m).read().decode("utf-8", "replace")
+
+                name_m = re.search(r"^Name:\s*(.+)$", text, re.M)
+                ver_m  = re.search(r"^Version:\s*(.+)$", text, re.M)
+
+                if name_m:
+                  print("Project Name:", name_m.group(1))
+                if ver_m:
+                  print("Version:", ver_m.group(1))
+          PY
+
+      - name: Publish package distributions to PyPI
+        run: uv publish