ci: workflow to publish mixpeek-mcp using python-sdk's PYPI_TOKEN

Checks out mixpeek/mcp-server, builds sdist+wheel, runs twine upload.
Triggered manually via gh workflow run publish-mcp.yml, or from the
mcp-server orchestrator workflow in the monorepo.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: esteininger

.github/workflows/publish-mcp.yml

@@ -0,0 +1,50 @@
+name: "Publish mcp-server to PyPI"
+
+on:
+  workflow_dispatch:
+    inputs:
+      ref:
+        description: "Branch/tag/sha of mixpeek/mcp-server to publish"
+        required: false
+        default: "main"
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check secret
+        run: |
+          if [ -z "${{ secrets.PYPI_TOKEN }}" ]; then
+            echo "::error::PYPI_TOKEN secret is not configured."
+            exit 1
+          fi
+
+      - name: Checkout mcp-server
+        uses: actions/checkout@v4
+        with:
+          repository: mixpeek/mcp-server
+          ref: ${{ github.event.inputs.ref }}
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Build mixpeek-mcp
+        run: |
+          python -m pip install --upgrade pip build twine
+          python -m build --sdist --wheel
+
+      - name: Publish mixpeek-mcp
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
+        run: |
+          set -e
+          PKG_VERSION=$(grep -E '^version\s*=' pyproject.toml | head -1 | sed -E 's/.*"([^"]+)".*/\1/')
+          if curl -sf "https://pypi.org/pypi/mixpeek-mcp/${PKG_VERSION}/json" >/dev/null; then
+            echo "::notice::mixpeek-mcp==${PKG_VERSION} already on PyPI — skipping"
+          else
+            twine upload dist/mixpeek_mcp-${PKG_VERSION}*
+            echo "::notice::Published mixpeek-mcp==${PKG_VERSION}"
+          fi