Add generic publish pipeline that supports both internal and external publishing via environment variables, without leaking any internal URLs or tool references into the public repository.