ci: add package verification check

Adds an end-to-end check that the built sdist and wheel install
cleanly and contain the expected sources via the shared
apify/workflows/python-package-check action. Runs on every PR and
inside the release flow between prepare-pypi-distribution and the
PyPI publish step, guarding against silent build regressions.

Author: vdusek

.github/workflows/_check_package.yaml

@@ -0,0 +1,29 @@
+name: Package check
+
+on:
+  workflow_dispatch:
+  workflow_call:
+
+permissions:
+  contents: read
+
+jobs:
+  package_check:
+    name: Package check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Set up uv package manager
+        uses: astral-sh/setup-uv@v8.1.0
+        with:
+          python-version: "3.14"
+
+      - name: Build sdist and wheel
+        run: uv run poe build
+
+      - name: Verify built package
+        uses: apify/workflows/python-package-check@main
+        with:
+          package_name: apify_shared

.github/workflows/manual_release_beta.yaml

@@ -60,6 +60,11 @@ jobs:
           version_number: ${{ needs.release_prepare.outputs.version_number }}
           ref: ${{ needs.changelog_update.outputs.changelog_commitish }}
 
+      - name: Verify built package
+        uses: apify/workflows/python-package-check@main
+        with:
+          package_name: apify_shared
+
       # Publish the package to PyPI using PyPA official GitHub action with OIDC authentication.
       - name: Publish package to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/manual_release_stable.yaml

@@ -95,6 +95,11 @@ jobs:
           version_number: ${{ needs.release_prepare.outputs.version_number }}
           ref: ${{ needs.changelog_update.outputs.changelog_commitish }}
 
+      - name: Verify built package
+        uses: apify/workflows/python-package-check@main
+        with:
+          package_name: apify_shared
+
       # Publishes the package to PyPI using PyPA official GitHub action with OIDC authentication.
       - name: Publish package to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/on_pull_request.yaml

@@ -17,6 +17,10 @@ jobs:
     name: Code checks
     uses: ./.github/workflows/_check_code.yaml
 
+  package_check:
+    name: Package check
+    uses: ./.github/workflows/_check_package.yaml
+
   tests:
     name: Tests
     uses: ./.github/workflows/_tests.yaml