Add publish workflow and CI smoke test

Author: JROChub

.github/workflows/ci.yml

@@ -50,3 +50,10 @@ jobs:
         run: python -m build
       - name: Check package metadata
         run: python -m twine check dist/*
+      - name: Install wheel
+        run: python -m pip install dist/*.whl
+      - name: Smoke test CLI
+        run: |
+          roc --version
+          roc run examples/hello.roc | tee /tmp/roc_hello.out
+          grep -Fx "Hello from Roc!" /tmp/roc_hello.out

.github/workflows/publish.yml

@@ -0,0 +1,51 @@
+name: Publish
+
+on:
+  workflow_dispatch:
+    inputs:
+      target:
+        description: "Publish target"
+        required: true
+        type: choice
+        options:
+          - testpypi
+          - pypi
+        default: "testpypi"
+      dry_run:
+        description: "Build only, skip upload"
+        required: false
+        type: choice
+        options:
+          - "false"
+          - "true"
+        default: "false"
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install build tooling
+        run: python -m pip install --upgrade pip build twine
+      - name: Build package
+        run: python -m build
+      - name: Check package metadata
+        run: python -m twine check dist/*
+      - name: Publish to TestPyPI
+        if: ${{ inputs.target == 'testpypi' && inputs.dry_run != 'true' }}
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
+          repository-url: https://test.pypi.org/legacy/
+      - name: Publish to PyPI
+        if: ${{ inputs.target == 'pypi' && inputs.dry_run != 'true' }}
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}

RELEASE.md

@@ -11,5 +11,8 @@ Use this checklist to cut a new release.
 4. Tag the release
    - `git tag vX.Y.Z`
    - `git push origin vX.Y.Z`
-5. Create a GitHub release
+5. Publish package (optional for prototype builds)
+   - Run the GitHub Actions "Publish" workflow for TestPyPI first.
+   - If green, rerun for PyPI.
+6. Create a GitHub release
    - Use the changelog entry as the release notes.