ci: make Azure feed + GHCR best-effort; tag only after PyPI publishes #27

Job	Run time
Live Integration Tests (Codex)	37s
Quality Gate (Format, Lint, Type, Test, Security)	1m 59s
Live Integration Tests (BYOA Plugin)	28s
No-Extra Install (uipath optional)	20s
E2E Smoke Tests (Real API)	3m 27s
Windows Smoke Test	3m 3s
Live Integration Tests (Settings Enforcement + Cost Budget)	47s
	10m 41s

Provide feedback