Simplify SPM publish workflow and add explicit SPM versioning guidance

[Copilot]

This updates the SPM manifest publish flow to stop workflow-managed PR operations while preserving manifest generation/push behavior on release events. It also clarifies README guidance for stable vs prerelease SPM dependency pinning.

• Workflow: remove PR automation, keep release branch publishing

  • Kept trigger on release.published.
  • Removed gh pr create/edit/list logic entirely.
  • Kept manifest rendering from release assets (validation, checksum computation, template substitution) unchanged.
  • Continued pushing manifest updates to release/<tag>, now derived directly from the tag (VERSION="$TAG").

• Workflow: least-privilege permissions + manual PR handoff

  • Reduced workflow permissions to contents: write only.
  • Added a final step to print the manual compare URL:
    • https://github.com/$GITHUB_REPOSITORY/compare/main...$BRANCH?expand=1

• Workflow: tag handling

  • Removed v-prefix enforcement.
  • Uses the release tag as-is for version/branch derivation.

• README: SPM versioning guidance

  • Added concise recommendations for:
    • stable consumption via from
    • prerelease validation via exact

.package(url: "https://github.com/microsoftconnect/Dragon-Copilot-UI-SDK-iOS", from: "5.0.0")
.package(url: "https://github.com/microsoftconnect/Dragon-Copilot-UI-SDK-iOS", exact: "5.0.0-beta-01")

[Copilot]

Pull request overview

This pull request updates the SPM manifest publishing workflow to remove workflow-driven PR automation while keeping the existing release-asset-based manifest rendering and branch publishing behavior. It also updates the README to give clearer guidance on how to pin stable vs prerelease versions when consuming the SDK via Swift Package Manager.

Changes:

• Removed pull-requests: write permission and deleted all gh pr create/edit/list automation from the publish workflow.
• Changed the workflow’s version/branch derivation to use the release tag as-is (VERSION="$TAG"), and added a final step that prints a manual compare URL for PR creation.
• Updated README SPM guidance with from (stable) and exact (prerelease) examples.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
README.md	Updates SwiftPM consumption guidance with stable vs prerelease pinning examples.
.github/workflows/publish-spm-manifest.yml	Simplifies release publish flow by removing PR automation and using tag-as-is for branch derivation, with a manual PR handoff URL.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (2)

README.md:34

• The prerelease example uses exact: "5.0.0-beta-01", but the repo’s current prerelease tag includes a leading v (e.g. v5.0.0-beta-01). If readers copy/paste this, SPM won’t find the tag. Align the example with the actual tag name (or clarify that users must match the tag string exactly).

  .package(url: "https://github.com/microsoftconnect/Dragon-Copilot-UI-SDK-iOS", exact: "5.0.0-beta-01")

README.md:30

• The README example uses from: "5.0.0", but this repo’s current stable tag format appears to be 4.0.0 (and there is no 5.0.0 tag at the moment). Using a non-existent version in the primary example will cause SPM resolution to fail for readers who copy/paste it. Consider updating the example to an existing stable tag (or make it a placeholder like "<latest-stable>").

  .package(url: "https://github.com/microsoftconnect/Dragon-Copilot-UI-SDK-iOS", from: "5.0.0")