Add release catalog canary

[msarahan]

Posted by Codex (GPT-5) on behalf of @msarahan. This pull request description is LLM-generated; readers should treat its content accordingly.

Summary

• point the Conda and wheel producer jobs at the development shared-workflows branch;
• exercise companion generation from both producer matrices; and
• validate repository-level catalog keys for the Conda and wheel publishable artifact sets.

This was a historical branch canary for the predecessor interface. The current contract uploads release-catalog-<source-artifact-name> companions containing one enveloped release-catalog-entries.json and evidence. These job-level entries are aggregated by the release platform into the release catalog.

The literal branch name codex/release-build-output-manifests and historical run artifact names retain the predecessor vocabulary because they are immutable Git and Actions identifiers.

Evidence semantics

This producer does not supply a dependency SBOM. Its companions contain generated-identity SPDX envelopes, which identify package artifacts and checksums but must not be reported as dependency coverage.

Tracks rapidsai/build-infra#381 and the current integration in rapidsai/shared-workflows#609.

Validation

• pre-commit run --all-files
• Black rerun through pre-commit under Python 3.11 because the machine's Python 3.12.5 is explicitly rejected by Black
• git diff --check

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[msarahan]

/ok to test 5577a1f

[msarahan]

/ok to test 8c4aea6

[msarahan]

/ok to test

[msarahan]

/ok to test f251b85

[msarahan]

/ok to test f251b85

[msarahan]

/ok to test

[msarahan]

Closing - this has served its purpose