Automate SDK package publication

Publishes protected release tags automatically after the required checks, reusing the tested wheel and source archive. Keeps tag/version/source/checksum guards and automatic CI reports, and updates the report job URL label and release instructions.

Verified locally: 20 CI/release tests and lint on the affected Python files. Native CI remains pending.