DEVOPS-1131: Use ref_name and add release tag validation in python_deploy_prod.yml

[RomFloreani]

DEVOPS-1131 - python_deploy_prod workflow to use tag from revision: no manual input
Use github.ref_name instead of workflow_dispatch input release-tag, and add a validate-release-tag job to fail fast when the workflow is not run from a tag.

Mirrors the change made in MiraGeoscience/simpeg#167.

[Copilot]

Pull request overview

This PR updates the production Python deployment GitHub Actions workflow to derive the release tag from the workflow’s ref context (github.ref_name) rather than a manual workflow_dispatch input, and adds a fail-fast guard to prevent running the workflow from non-tag refs.

Changes:

• Removed the workflow_dispatch release-tag input and switched tag resolution to github.ref_name.
• Added a validate-release-tag job to fail early when manually triggered from a non-tag ref.
• Updated concurrency grouping and downstream reusable-workflow inputs to use the resolved tag.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.10%. Comparing base (f19fcbc) to head (be32c44).

Additional details and impacted files

@@             Coverage Diff             @@
##           develop     #219      +/-   ##
===========================================
+ Coverage    85.78%   86.10%   +0.31%     
===========================================
  Files           18       18              
  Lines          950      950              
  Branches       126      126              
===========================================
+ Hits           815      818       +3     
+ Misses          99       97       -2     
+ Partials        36       35       -1     

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.