[ty] Publish memory reports from GitHub Actions (astral-sh#29607)

Memory report comments currently depend on `astral-sh-bot`. Publish the
memory diff artifact as `astral-automations-bot[bot]` after the memory
report job, using the shared STS publisher and comment IDs from the
key-value store. This handles same-repository pull requests, including
runs that upload a report before failing.

Depends on astral-sh#29606.

---------

Co-authored-by: zaniebot <242828183+zaniebot@users.noreply.github.com>

Author: zanieb

.github/workflows/memory_report.yaml

@@ -124,10 +124,27 @@ jobs:
               --output ../memory_report_diff.diff
           )
 
-      # NOTE: astral-sh-bot uses this artifact to post comments on PRs.
-      # Make sure to update the bot if you rename the artifact.
       - name: Upload diff
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: memory_report_diff
           path: memory_report_diff.diff
+
+  publish-report:
+    needs: memory_report
+    if: >-
+      !cancelled() && github.event_name == 'pull_request' &&
+      github.repository == 'astral-sh/ruff' &&
+      github.event.pull_request.head.repo.full_name == github.repository &&
+      (needs.memory_report.result == 'success' || needs.memory_report.result == 'failure')
+    uses: astral-sh/ruff/.github/workflows/publish-pull-request-report.yml@main # zizmor: ignore[unpinned-uses]
+    secrets:
+      KV_API_URL: ${{ secrets.KV_API_URL }}
+      STS_API_URL: ${{ secrets.STS_API_URL }}
+    permissions:
+      contents: read
+      id-token: write
+    with:
+      report: memory
+      artifact: memory_report_diff
+      filename: memory_report_diff.diff