Publish wyrmctl-cloudflare to PyPI

[cobycloud]

Problem

The wyrmctl-cloudflare DNS provider package is defined at packages/wyrmctl-cloudflare/pyproject.toml (currently version 0.4.0), but https://pypi.org/pypi/wyrmctl-cloudflare/json returns HTTP 404. The package has not yet been published to PyPI.

Work

• Configure PyPI Trusted Publishing for the wyrmctl-cloudflare project and the groupsum/wyrmctl release workflow/environment.
• Publish this package through the portable reusable PyPI publishing workflow from cobycloud/actions.
• Ensure the release build selects the distribution produced from packages/wyrmctl-cloudflare and does not accidentally publish the workspace root or another provider.
• Preserve synchronized versioning and release-gate behavior.
• Record the publication evidence in the release output or issue.

Acceptance criteria

• The repository release workflow invokes the reusable cobycloud/actions PyPI Trusted Publishing workflow for this package.
• PyPI Trusted Publishing is configured without a long-lived API token.
• Version 0.4.0 or a newer synchronized release is visible at https://pypi.org/project/wyrmctl-cloudflare/.
• pip install wyrmctl-cloudflare succeeds from the public PyPI index in a clean environment.
• The installed package exposes the Cloudflare DNS provider through the wyrmctl.dns_providers entry-point group.
• The successful GitHub Actions run and PyPI project URL are linked here.