ci: consolidate publish into release-please workflow

Author: omercnet

.github/workflows/python-publish.yaml

@@ -25,3 +25,28 @@ jobs:
           token: ${{ steps.app-token.outputs.token }}
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json
+
+  publish:
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created == 'true' }}
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          ref: ${{ needs.release-please.outputs.tag_name }}
+
+      - name: Setup
+        uses: descope/.github/.github/actions/python/poetry/setup@main
+        with:
+          python-version: "3.11"
+
+      - name: Build
+        uses: descope/.github/.github/actions/python/poetry/build@main
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1