ci: unified CI and release workflows with reusable build pipelines

[cdecker]

Summary

Replaces the per-language standalone CI workflows and the per-crate tag-triggered release workflow with a unified architecture built on reusable build workflows.

Architecture

graph TD
    subgraph "Reusable Build Workflows"
        BR[build-rust.yml]
        BK[build-kotlin.yml]
        BN[build-napi.yml]
        BP[build-python.yml]
        BS[build-swift.yml]
    end

    subgraph "Orchestrators"
        CI[ci.yml]
        REL[release.yml]
    end

    CI --> BR
    CI --> BK
    CI --> BN
    CI --> BP

    REL --> BS
    REL --> BK
    REL --> BN
    REL --> BP

Loading

Changes

Deleted (replaced by ci.yml):

• kotlin.yml, python.yml, typescript.yml, rust-unit.yml, check-formatting.yml

New reusable build workflows (workflow_call only):

• build-rust.yml — workspace build + test
• build-swift.yml — iOS XCFramework + Swift sources
• build-kotlin.yml — Android NDK + KMP bindings
• build-napi.yml — Node.js native bindings (5 targets)
• build-python.yml — Python wheels (6 targets + sdist)

New ci.yml — CI orchestrator for PRs/pushes. Calls the build workflows and runs N-API integration tests + Python install smoke test + formatting check.

Replaced release.yml — Release orchestrator (manual dispatch):

• Validates version numbers match Cargo.toml + changelog entries exist
• Publishes Rust crates in topological order (gl-client -> gl-sdk -> gl-sdk-cli) with crates.io index polling between steps
• Builds all bindings in parallel via reusable workflows
• Publishes to npm, PyPI, Swift SPM, creates GitHub Releases + tags
• Uses trusted publishing (OIDC) for crates.io — no API token needed
• Dry-run mode: runs cargo publish --dry-run, npm publish --dry-run, builds all bindings, but skips real publishing/tagging

Other:

• Added license and repository to gl-sdk-cli/Cargo.toml (required for crates.io)

Testing

After merge, run the Release Orchestrator with dry_run=true to validate everything end-to-end without publishing.