Revert "uncomment pypi publish job, gated on manual environment approval"

This reverts commit 46ced3da51.

.github/workflows/release.yml

@@ -35,29 +35,32 @@ jobs:
           name: dist
           path: dist/
 
-  # Publishing is intentionally a separate, manually-approved job: a tag push
+  # Publishing is intentionally a separate, manually-approved job.
-  # builds and tests automatically, but a human still has to approve the
-  # `pypi` environment before this job runs and actually publishes.
   #
-  # "netsleuth" confirmed free on PyPI 2026-08-09 (pypi.org/pypi/netsleuth/json
+  # RENAMED as of 2026-08-09: the distribution name "netcheck" was already
-  # -> 404). Before the first tag push actually publishes, still needed:
+  # taken on PyPI by an unrelated project (Netchecks / hardbyte, a cloud-native
-  #   1. Register a PyPI Trusted Publisher for this not-yet-published project
+  # network-assertion tool, https://pypi.org/project/netcheck/). `pyproject.toml`'s
-  #      name at https://pypi.org/manage/account/publishing/ — no token needed,
+  # [project] name has been changed to "netsleuth" — see TASKS.md.
-  #      this workflow's OIDC identity gets authorized directly on pypi.org.
+  #
-  #      Owner: Horizontal42, repo: netsleuth, workflow: release.yml,
+  # Still needed before this job can be enabled:
-  #      environment: pypi.
+  #   1. Confirm "netsleuth" is actually free on PyPI (fresh availability check —
-  #   2. Create the `pypi` GitHub Environment (repo Settings → Environments)
+  #      it was only checked against the old name).
-  #      with a required-reviewer protection rule, so publishing needs a
+  #   2. Set up PyPI Trusted Publishing for the new project name
-  #      manual click even after the workflow triggers.
+  #      (https://docs.pypi.org/trusted-publishers/) — no token needed, this
-  publish:
+  #      workflow's OIDC identity gets authorized directly on pypi.org.
-    needs: build-and-test
+  #   3. Uncomment the job below and give it an `environment: pypi` protection
-    runs-on: ubuntu-latest
+  #      rule requiring manual approval, so a tag push builds automatically
-    environment: pypi
+  #      but a human still has to click "publish."
-    permissions:
+  #
-      id-token: write
+  # publish:
-    steps:
+  #   needs: build-and-test
-      - uses: actions/download-artifact@v4
+  #   runs-on: ubuntu-latest
-        with:
+  #   environment: pypi
-          name: dist
+  #   permissions:
-          path: dist/
+  #     id-token: write
-      - uses: pypa/gh-action-pypi-publish@release/v1
+  #   steps:
+  #     - uses: actions/download-artifact@v4
+  #       with:
+  #         name: dist
+  #         path: dist/
+  #     - uses: pypa/gh-action-pypi-publish@release/v1