fix: broken uv publish command in release workflow

[BnJam]

Problem

The PyPI publish step in .github/workflows/release.yml (~line 241) has a malformed uv publish command that causes the release pipeline to fail.

Current (broken):

uv publish dist --token ${{ secrets.MATURIN_PYPI_TOKEN }} *.whl *.tar.gz **/*.whl **/*.tar.gz dist/*

Issues:

• --token is placed mid-command between positional arguments — uv publish expects [FILES]... [OPTIONS], not options interspersed
• Redundant and conflicting glob patterns (*.whl, **/*.whl, dist/*) alongside the dist positional argument
• Same pattern repeated in .github/workflows/tag-release.yml (~line 96)

Expected:

uv publish dist/* --token ${{ secrets.MATURIN_PYPI_TOKEN }}

Steps to reproduce

Push a tag matching the release pattern — the publish job will fail at the uv publish step.

Additional context

• pyproject.toml build backend is maturin, which produces wheels into dist/ via the prior build step — artifacts are correct, only the publish command is wrong
• The pip install maturin step immediately before publish (~line 231) is now unused and can be removed

[BnJam]

Starting work on this issue...