fix docs and publish workflows

[vgreg]

Summary

Fixes the two broken GitHub Actions workflows found while reviewing the initial project build:

• docs.yml: uv sync --group docs failed because the docs dependencies are declared as an optional-dependencies extra, not a dependency group. Changed to uv sync --extra docs (verified locally that it resolves).
• publish.yml: previously triggered on every push to main and tried to auto-bump the version, which never succeeded (no tags or bump commits exist on main) and would have published a PyPI release on every merge, without waiting for CI. Rewritten to trigger on v* tag pushes, run the test suite before building, and publish via PyPI trusted publishing.

Release flow after this change

uv run bump-my-version bump patch   # commits and tags v{new_version} (already configured in pyproject)
git push --follow-tags              # tag push triggers the publish workflow

Notes

• PyPI trusted publishing must be configured on pypi.org for the first publish to succeed.

🤖 Generated with Claude Code