DEVX-43: feat: add publish step to post-merge release job, make publish idempotent

.gitea/workflows/post-merge.yml

@@ -75,7 +75,7 @@ jobs:
     needs: [detect-type]
     if: needs.detect-type.outputs.is-release == 'false'
     runs-on: docker
-    timeout-minutes: 10
+    timeout-minutes: 15
     steps:
       - uses: actions/checkout@v4
         with:
@@ -94,6 +94,25 @@ jobs:
           . .venv/bin/activate
           export PATH="$HOME/.local/bin:$PATH"
           python3 -m devx.ci.release
+      - name: Publish release
+        env:
+          REPO_TOKEN: ${{ secrets.REPO_TOKEN }}
+          PYTHONPATH: src
+        run: |
+          . .venv/bin/activate
+          export PATH="$HOME/.local/bin:$PATH"
+          TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+          if [ -z "$TAG" ]; then
+            echo "No tag found — skipping publish"
+            exit 0
+          fi
+          HEAD_MSG=$(git log -1 --format=%s)
+          if echo "$HEAD_MSG" | grep -q "^release: ${TAG}"; then
+            echo "Publishing release $TAG..."
+            python3 -m devx.ci.publish "$TAG" "${{ github.repository }}"
+          else
+            echo "HEAD is not a release commit for $TAG — skipping publish"
+          fi
       - name: Notify on failure
         if: failure()
         env: