Add NuGet OIDC smoke test

[andymeierdev]

Summary

• allow manually dispatching the trusted reusable package workflow from main
• authenticate with NuGet/login under the protected release environment
• verify NuGet issued a temporary API key without building or publishing a package
• preserve normal package build and publication behavior for reusable workflow calls

Verification

• workflow YAML parsed successfully
• all external Actions remain pinned to full commit SHAs
• git diff --check passed

[github-actions]

🍹 preview on fsharp-view-engine/prod

Pulumi report

View in Pulumi Cloud

  Previewing update (prod)

View Live: https://app.pulumi.com/meiermade/fsharp-view-engine/prod/previews/0913edef-6b97-4501-bd7a-7425c1a3b89a

pulumi:pulumi:Stack: (same)
  [urn=urn:pulumi:prod::fsharp-view-engine::pulumi:pulumi:Stack::fsharp-view-engine-prod]
  ~ docker-build:index:Image: (update)
      [id=sha256:59c08fe493a66e70d4a5f8fe76d6022c2e053db11b573e20e6ab64b754b09fc2]
      [urn=urn:pulumi:prod::fsharp-view-engine::docker-build:index:Image::fsharpviewengine]
    - contextHash: "6950f9a3597936c407286cfbee488360b0483845c03eef4ac6909cb5ebd8ce77"
  ~ kubernetes:apps/v1:Deployment: (update)
      [id=fsharpviewengine/fsharpviewengine]
      [urn=urn:pulumi:prod::fsharp-view-engine::kubernetes:apps/v1:Deployment::fsharpviewengine]
    ~ spec: {
        ~ template: {
            ~ spec: {
                ~ containers: [
                    ~ [0]: {
                            ~ env  : [
                                ~ [0]: {
                                        ~ value: "2026.8.0" => "preview"
                                      }
                                ~ [1]: {
                                        ~ value: "4c84b7ac72ce00436e1a344c0adf72c021333c77" => "5d2da382ab740588f1a25ccb2afd41067bc5110b"
                                      }
                              ]
                            ~ image: "us-east1-docker.pkg.dev/meiermade-platform/platform/fsharpviewengine:latest@sha256:3ef84bf7a51bd419bfa447722e51ea1816d140bac6f0ade5673acd01ced006b9" => [unknown]
                          }
                  ]
              }
          }
      }
Resources:
  ~ 2 to update
  8 unchanged