fix(ci): ensure publish job runs on tag pushes

- Add always() condition to publish job to ensure it runs
- Check test job result explicitly before publishing
- This fixes the issue where publish was skipped due to complex dependencies

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: jamesbrink

.github/workflows/ci.yml

@@ -178,8 +178,11 @@ jobs:
   # PyPI publishing - only on version tags
   publish:
     name: Publish to PyPI
-    if: startsWith(github.ref, 'refs/tags/v')
     needs: [test]
+    if: |
+      always() &&
+      needs.test.result == 'success' &&
+      startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
     environment:
       name: pypi