Keep the build (and the build-only dry-run) out of the protected `pypi`
environment so dispatching from main no longer fails environment branch
rules. Only the separate, environment-gated publish job runs on real
releases and uploads via OIDC.
Co-authored-by: Cursor <cursoragent@cursor.com>
- Add .github/workflows/release.yml: build + publish to PyPI on GitHub
Release via Trusted Publishing (OIDC), with a tag/version guard, twine
check, and a build-only dry-run option.
- setup.py reads the top-level README.md (with fallback) so the package
always ships the current README; refresh the short description.
- Remove the stale air_llm/README.md duplicate and gitignore it (now a
build-time artifact synced from the root README).
Co-authored-by: Cursor <cursoragent@cursor.com>