ci: consolidate source distribution release controls

.github/workflows/publish-python-sdist.yml

@@ -7,13 +7,20 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: publish-python-sdist-${{ github.event.release.tag_name }}
+  cancel-in-progress: false
+
 jobs:
   build:
     name: Build source distribution
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - name: Check out the release source
         uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.release.tag_name }}
 
       - name: Build source distribution
         uses: PyO3/maturin-action@v1
@@ -27,11 +34,13 @@ jobs:
           name: python-sdist
           path: dist/*.tar.gz
           if-no-files-found: error
+          retention-days: 7
 
   publish:
     name: Publish source distribution to PyPI
     needs: build
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     environment:
       name: pypi
       url: https://pypi.org/p/deepseek-recipe