ci: invoke ruff + pyright in test.yml + publish.yml

Adds two new steps to the existing test matrix (Python 3.10-3.13) and
mirrors them into publish.yml's gate test job. pyproject.toml has had
[tool.ruff] and [tool.pyright] configs since the repo was created; now
they actually run.

Lint + type-check are cheap compared to the test suite (<5s each) and
catch the class of issue the previous commit fixed before it can land
on main.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Mlaz-code

.github/workflows/publish.yml

@@ -30,7 +30,15 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install dependencies
-        run: pip install -e ".[test,pandas]"
+        run: |
+          pip install -e ".[test,pandas]"
+          pip install ruff pyright
+
+      - name: Ruff check
+        run: ruff check
+
+      - name: Pyright
+        run: pyright
 
       - name: Run tests
         run: pytest -v

.github/workflows/test.yml

@@ -23,6 +23,18 @@ jobs:
       - name: Install dependencies
         run: |
           pip install -e ".[test,pandas]"
+          pip install ruff pyright
+
+      - name: Ruff check
+        # [tool.ruff] config is already in pyproject.toml — rules E, F,
+        # I, UP. This step enforces them; before today they were only
+        # suggestions.
+        run: ruff check
+
+      - name: Pyright
+        # Same story — [tool.pyright] was set to standard mode in
+        # pyproject.toml but never invoked in CI.
+        run: pyright
 
       - name: Run tests
         run: pytest -v