[ty] Publish typing conformance reports from GitHub Actions (astral-sh#29608)

Typing conformance report comments currently depend on `astral-sh-bot`.
Publish the diagnostics diff as `astral-automations-bot[bot]` after the
conformance job, using the shared STS publisher and comment IDs from the
key-value store for same-repository pull requests.

Depends on astral-sh#29607.

---------

Co-authored-by: zaniebot <242828183+zaniebot@users.noreply.github.com>

Author: zanieb

.github/workflows/typing_conformance.yaml

@@ -118,10 +118,27 @@ jobs:
              --output ../typing_conformance_diagnostics.diff
           )
 
-      # NOTE: astral-sh-bot uses this artifact to post comments on PRs.
-      # Make sure to update the bot if you rename the artifact.
       - name: Upload diff
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: typing_conformance_diagnostics_diff
           path: typing_conformance_diagnostics.diff
+
+  publish-report:
+    needs: typing_conformance
+    if: >-
+      !cancelled() && github.event_name == 'pull_request' &&
+      github.repository == 'astral-sh/ruff' &&
+      github.event.pull_request.head.repo.full_name == github.repository &&
+      (needs.typing_conformance.result == 'success' || needs.typing_conformance.result == 'failure')
+    uses: astral-sh/ruff/.github/workflows/publish-pull-request-report.yml@main # zizmor: ignore[unpinned-uses]
+    secrets:
+      KV_API_URL: ${{ secrets.KV_API_URL }}
+      STS_API_URL: ${{ secrets.STS_API_URL }}
+    permissions:
+      contents: read
+      id-token: write
+    with:
+      report: typing-conformance
+      artifact: typing_conformance_diagnostics_diff
+      filename: typing_conformance_diagnostics.diff