add gitflow CI for dev/stage/prod environments

.gitea/workflows/engram-release.yaml

@@ -110,6 +110,31 @@ jobs:
 
           echo "Release published successfully"
 
+      # Publish artifact to GCP Artifact Registry (prod)
+      - name: Publish engram to Artifact Registry (prod)
+        env:
+          GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
+        run: |
+          echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
+          apt-get install -y -qq apt-transport-https ca-certificates gnupg curl
+          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg
+          echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
+          apt-get update -qq && apt-get install -y google-cloud-cli
+          gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
+          gcloud config set project neuron-785695
+
+          VERSION="${GITEA_SHA:0:8}"
+          gcloud artifacts generic upload \
+            --repository=foundation-prod \
+            --location=us-central1 \
+            --project=neuron-785695 \
+            --package=engram/engram \
+            --version="${VERSION}" \
+            --source=dist/engram
+
+          echo "Published engram version=${VERSION} to foundation-prod/engram/engram"
+          rm -f /tmp/gcp-key.json
+
       # Dispatch engram-updated to any downstream dependents
       - name: Dispatch engram-updated to dependents
         env: