* Set up trusted publishing from GHA - Add build to dev deps - Add sdist job to build sdist - Add publish job to publish tagged releases * Move UV env to workflow level