Fix NuGet publish workflow

Author: cursoragent

.github/workflows/config.yml

@@ -187,8 +187,24 @@ jobs:
   publish:
     runs-on: windows-latest
     needs: [test-ubuntu, test-windows]
-    if: github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' || startsWith(github.ref, 'refs/tags/')
+    if: startsWith(github.ref, 'refs/tags/')
+    permissions:
+      contents: read
+      id-token: write
     steps:
+      - uses: actions/checkout@v4
+
+      - name: Install .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: ${{ env.DOTNET_VERSION }}
+
+      - name: Build
+        run: dotnet build .\src\EFCore.SingleStore\EFCore.SingleStore.csproj -c Release
+
+      - name: Pack NuGet
+        run: dotnet pack .\src\EFCore.SingleStore\EFCore.SingleStore.csproj -c Release -o efcore_provider
+
       - name: NuGet login (OIDC → temp API key)
         uses: NuGet/login@v1
         id: login
@@ -207,3 +223,14 @@ jobs:
 
           echo "NuGet Trusted Publishing login succeeded."
           echo "Temporary API key was returned, but it was not printed."
+
+      - name: Publish NuGet package
+        env:
+          NUGET_API_KEY: ${{ steps.login.outputs.NUGET_API_KEY }}
+        run: dotnet nuget push .\efcore_provider\*.nupkg --api-key "$env:NUGET_API_KEY" --source https://api.nuget.org/v3/index.json --skip-duplicate
+
+      - name: Upload Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: efcore-provider
+          path: efcore_provider/