feat: sync infrastructure changes from develop to main

This PR contains minimal infrastructure updates required to align main
branch with develop branch improvements:

Changes from commit e0c152e (release tag pattern fix):
- Add endsWith() checks to release tag matching logic
- Ensures tags ending with '-ats' or '-ATS' trigger workflows
- Fixes both contracts and SDK job conditions in ats.publish.yml

Changes from commit 7f34000 (npm publish access fix):
- Change npm publish access from 'restricted' to 'public'
- Required for scoped @hashgraph packages to publish correctly
- Applied to both contracts and SDK publish steps

Additional change:
- Move workflows documentation from .github/README.md to
  .github/workflows/README.md for better organization

All other workflow files remain identical to main branch, ensuring no
unintended regressions. This is part 1/2 of the develop-to-main sync
strategy (infrastructure changes only).

Related: Part 2/2 is PR #713 (codebase changes)
Signed-off-by: Miguel_LZPF <miguel.carpena@io.builders>

Author: MiguelLZPF

.github/README.md .github/workflows/README.md.github/README.md renamed to .github/workflows/README.md

@@ -11,28 +11,6 @@ The repository uses **Changesets** for version management with independent relea
 
 All development happens on the `develop` branch with automated testing, changeset validation, and manual release controls by authorized teams.
 
-## How to test github workflows locally
-
-To be able to test github workflows locally you can use act, a github actions simulator [act homepage](https://nektosact.com/introduction.html)
-
-### Install act
-
-```bash
-curl --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/nektos/act/master/install.sh | sudo bash
-```
-
-### Run workflow
-
-Substitute \<workflow\> for the workflow you want to test (ats.pubilsh, mp.release, ...)
-
-```bash
-./bin/act workflow_dispatch \
-  -W .github/workflows/<workflow>.yml \
-  --input dry-run-enabled=true \
-  -s NPM_TOKEN=fake_token \
-  -P token-studio-linux-large=catthehacker/ubuntu:act-latest
-```
-
 ## Developer Workflow
 
 ### Daily Development Process
@@ -80,13 +58,11 @@ sequenceDiagram
 
 4. **Commit with DCO and Signature compliance**:
 
-Commit messages should comply with the [conventional commits standard](https://www.conventionalcommits.org/en/v1.0.0/)
-
-```bash
-git add .
-git commit --signoff -S -m "feat: your commit message"
-git push origin feature/your-feature-name
-```
+   ```bash
+   git add .
+   git commit --signoff -S -m "feat: your commit message"
+   git push origin feature/your-feature-name
+   ```
 
 5. **Open PR to develop branch** - automated checks will run
 
@@ -340,13 +316,13 @@ sequenceDiagram
 
 ```bash
 # Development
-npm run changeset                # Create changeset
+npm run changeset                 # Create changeset
 npm run changeset:status         # Check pending changes
 npm run ats:test                 # Run ATS tests
 npm run mass-payout:test         # Run MP tests
 
 # Preview releases
-npm run release:preview         # Show all pending releases
+npm run release:preview          # Show all pending releases
 npm run release:ats             # Preview ATS release (local)
 npm run release:mp              # Preview MP release (local)
 ```

.github/workflows/ats.publish.yml

@@ -27,8 +27,8 @@ jobs:
   contracts:
     name: Publish ATS Contracts
     runs-on: token-studio-linux-large
-    # Only run if manual trigger OR release tag contains '-ats-'/'-ATS-'
-    if: ${{ github.event_name == 'workflow_dispatch' || contains(github.ref_name, '-ats-') || contains(github.ref_name, '-ATS-') }}
+    # Only run if manual trigger OR release tag contains/ends with '-ats'/'-ATS'
+    if: ${{ github.event_name == 'workflow_dispatch' || contains(github.ref_name, '-ats-') || contains(github.ref_name, '-ATS-') || endsWith(github.ref_name, '-ats') || endsWith(github.ref_name, '-ATS') }}
 
     steps:
       - name: Harden Runner
@@ -67,7 +67,7 @@ jobs:
           DRY_RUN: ${{ inputs.dry-run-enabled }}
         working-directory: packages/ats/contracts
         run: |
-          PUBLISH_ARGS=("--access=restricted")
+          PUBLISH_ARGS=("--access=public")
           if [[ "${DRY_RUN}" == "true" ]]; then
             PUBLISH_ARGS+=("--dry-run")
             echo "🔍 DRY RUN MODE: Would publish @hashgraph/asset-tokenization-contracts"
@@ -82,8 +82,8 @@ jobs:
   sdk:
     name: Publish ATS SDK
     runs-on: token-studio-linux-large
-    # Only run if manual trigger OR release tag contains '-ats-'/'-ATS-'
-    if: ${{ github.event_name == 'workflow_dispatch' || contains(github.ref_name, '-ats-') || contains(github.ref_name, '-ATS-') }}
+    # Only run if manual trigger OR release tag contains/ends with '-ats'/'-ATS'
+    if: ${{ github.event_name == 'workflow_dispatch' || contains(github.ref_name, '-ats-') || contains(github.ref_name, '-ATS-') || endsWith(github.ref_name, '-ats') || endsWith(github.ref_name, '-ATS') }}
     # needs: contracts  # Commented out for parallel execution
 
     steps:
@@ -125,7 +125,7 @@ jobs:
           DRY_RUN: ${{ inputs.dry-run-enabled }}
         working-directory: packages/ats/sdk
         run: |
-          PUBLISH_ARGS=("--access=restricted")
+          PUBLISH_ARGS=("--access=public")
           if [[ "${DRY_RUN}" == "true" ]]; then
             PUBLISH_ARGS+=("--dry-run")
             echo "🔍 DRY RUN MODE: Would publish @hashgraph/asset-tokenization-sdk"