Fix check-deploy-branch workflow parse failure in publish.yaml

[Copilot]

The check-deploy-branch job failed before evaluation due to a Bash heredoc parsing error in the branch-policy step. This blocked branch-gating logic and prevented the deploy workflow from progressing.

• Root cause (workflow parser break)

  • In .github/workflows/publish.yaml, the inline Python heredoc terminator was indented, so Bash never matched <<'PY' and exited with unexpected end of file.

• Change made (minimal, targeted)

  • Adjusted heredoc terminator placement in check-deploy-branch so the embedded Python block closes correctly and the should_deploy output can be set.

• Code change

  if POLICY_RESPONSE="${policy_response}" BRANCH_NAME="${GITHUB_REF_NAME}" python - <<'PY'
    ...
  PY
  then
    echo "should_deploy=true" >> "${GITHUB_OUTPUT}"
  else
    echo "should_deploy=false" >> "${GITHUB_OUTPUT}"
  fi