Add tag-triggered PyPI release workflow with OIDC trusted publishing

Add HF_TOKEN preflight + LICENSE + ignore build artifacts

Opt sync workflow into Node 24

Add GitHub Action to sync repo to HF Space