feat(ci): add Forgejo PyPI publish workflow and make target

Adds publish-forgejo and a workflow_dispatch/tag workflow so issue-core
0.2.x can be published to forgejo.coulomb.social before vergabe-teilnahme
drops Gitea lockfile URLs.

.forgejo/workflows/publish-python-package.yml

@@ -0,0 +1,41 @@
+name: Publish Python package
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Fetch source archive
+        env:
+          REF: ${{ github.sha }}
+        run: |
+          set -eu
+          mkdir -p buildctx
+          wget -qO /tmp/repo.tar.gz \
+            "https://forgejo.coulomb.social/${GITHUB_REPOSITORY}/archive/${REF}.tar.gz"
+          tar xzf /tmp/repo.tar.gz -C buildctx --strip-components=1
+
+      - name: Set up Python
+        run: |
+          python3 -m pip install --upgrade pip build twine
+
+      - name: Build and validate distributions
+        working-directory: buildctx
+        run: |
+          python3 -m build
+          python3 -m twine check dist/*
+
+      - name: Upload to Forgejo PyPI
+        working-directory: buildctx
+        env:
+          TWINE_USERNAME: ${{ secrets.FORGEJO_PYPI_USER }}
+          TWINE_PASSWORD: ${{ secrets.FORGEJO_PYPI_TOKEN }}
+        run: >-
+          python3 -m twine upload
+          --repository-url https://forgejo.coulomb.social/api/packages/coulomb/pypi
+          dist/*