ci: run production publish job in the production environment

[DeepakSingh80]

What

Adds environment: production to the production publish job in .github/workflows/publish.yml (job build).

Why

Native SDK CI/CD Phase 1 §4: production publishing runs only through a production GitHub Environment pinned to the production branch, following the gw-fe-las pattern (branch policy, no required reviewers).

Before merging

• A repo admin has created the production Environment: Settings → Environments → production → Deployment branches → Selected branches → production; no required reviewers. If this merges first, GitHub auto-creates the Environment without the branch policy.
• Production releases are cut from the production branch. With the policy in place, this job will no longer run when dispatched from prod / master.

No secrets move: this job uses OIDC (no stored secrets).

🤖 Generated with Claude Code