CI: run release-oriented checks on every PR

## Summary

  Automate the critical checks currently run manually before release.

  ## Acceptance criteria

  - run targeted SDK tests
  - build wheel and sdist
  - run twine check
  - fail PRs on release-breaking issues
  - document the CI contract for maintainers
