Publishing guide

Prepare a versioned manifest and upload its declared files. Trusted publishing can exchange an approved GitHub workflow identity for a short-lived publishing token. Submit the exact version and review the resulting checks before publication.