Install python3-pip via apt so twine publish works on the default ubuntu-latest container image (same substrate fix as kaizen-agentic).
Adds publish-forgejo and a workflow_dispatch/tag workflow so issue-core 0.2.x can be published to forgejo.coulomb.social before vergabe-teilnahme drops Gitea lockfile URLs.