ci: add dev branch auto-publish to release workflow

Add dev branch to push trigger with dev-specific version bumping
(hatch version dev) and loop prevention ([skip ci] + actor guard).
Dev pushes publish to PyPI without creating GitHub Releases.
Main branch behavior preserved via job-level condition.

Author: jstvz

.github/workflows/release.yml

@@ -4,24 +4,39 @@ on:
     push:
         branches:
             - main
-        paths:
-            - cumulusci/__about__.py
+            - dev
 
 concurrency: publishing
 
 jobs:
     publish-to-pypi:
         name: Publish new release to PyPI
         runs-on: SFDO-Tooling-Ubuntu
+        if: >-
+            (github.ref_name == 'main' && contains(github.event.head_commit.modified, 'cumulusci/__about__.py'))
+            || (github.ref_name == 'dev' && github.actor != 'github-actions[bot]')
         steps:
             - uses: actions/checkout@v4
+              with:
+                  token: ${{ secrets.GITHUB_TOKEN }}
             - name: Set up Python 3.13
               uses: actions/setup-python@v5
               with:
                   python-version: 3.13
                   cache: pip
             - name: Install build tools
               run: python -m pip install hatch tomli tomli-w
+            - name: Bump dev version
+              if: github.ref_name == 'dev'
+              run: hatch version dev
+            - name: Commit and push dev version bump
+              if: github.ref_name == 'dev'
+              run: |
+                  git config user.name "github-actions[bot]"
+                  git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+                  git add cumulusci/__about__.py
+                  git commit -m "Bump dev version [skip ci]"
+                  git push
             - name: Build source tarball and binary wheel
               run: hatch build -c
             - name: Upload to PyPI
@@ -30,6 +45,7 @@ jobs:
                   HATCH_INDEX_USER: "__token__"
                   HATCH_INDEX_AUTH: ${{ secrets.PYPI_TOKEN }}
             - name: Create release
+              if: github.ref_name == 'main'
               env:
                   GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
               run: |