Migrate to our new Python standard + fix many subtle issues

.github/workflows/publish.yml

@@ -0,0 +1,52 @@
+name: Build and upload to PyPI
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  publish:
+    runs-on: ubuntu-22.04
+    permissions:
+      id-token: write # mandatory for PyPI trusted publishing
+
+    steps:
+      - uses: actions/[email protected]
+
+      - name: Set up Python 3.11
+        uses: actions/[email protected]
+        with:
+          python-version: "3.11"
+          architecture: x64
+
+      - name: Build packages
+        run: |
+          pip install -U pip build
+          python -m build sdist wheel
+
+      - name: Upload to PyPI
+        uses: pypa/[email protected]
+        # dont specify anything for Trusted Publishing
+        # https://docs.pypi.org/trusted-publishers
+        # with:
+        #  # Using token
+        #  user: __token__
+        #  password: ${{ secrets.PYPI_API_TOKEN }}
+        #
+        #  # Using token on test index
+        #  password: ${{ secrets.PYPI_TEST_API_TOKEN }}
+        #  repository_url: https://test.pypi.org/legacy/
+
+      - name: Build and push Docker image
+        uses: openzim/docker-publish-action@v10
+        with:
+          image-name: openzim/kolibri
+          on-master: dev
+          tag-pattern: /^v([0-9.]+)$/
+          latest-on-tag: true
+          restrict-to: openzim/kolibri
+          registries: ghcr.io
+          credentials: GHCRIO_USERNAME=${{ secrets.GHCR_USERNAME }}
+            GHCRIO_TOKEN=${{ secrets.GHCR_TOKEN }}
+          repo_description: auto
+          repo_overview: auto

.github/workflows/pull.yml

@@ -0,0 +1,10 @@
+name: Pull Request
+
+on:
+  pull_request:
+
+jobs:
+  qa:
+    uses: ./.github/workflows/qa.yml
+    # run qa job if the pull request originates from a fork (otherwise the qa is already triggered by the push to a branch)
+    if: github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name

.github/workflows/push.yml

@@ -0,0 +1,8 @@
+name: Push
+
+on:
+  push:
+
+jobs:
+  qa:
+    uses: ./.github/workflows/qa.yml

.github/workflows/qa.yml

@@ -0,0 +1,34 @@
+name: QA
+
+on:
+  workflow_call:
+
+jobs:
+  check-qa:
+    runs-on: ubuntu-22.04
+
+    steps:
+      - uses: actions/[email protected]
+
+      - name: Set up Python 3.11
+        uses: actions/[email protected]
+        with:
+          python-version: "3.11"
+          architecture: x64
+
+      - name: Install dependencies (and project)
+        run: |
+          pip install -U pip
+          pip install -e .[lint,scripts,test]
+
+      - name: Check black formatting
+        run: inv lint-black
+
+      - name: Check ruff
+        run: inv lint-ruff
+
+      # Installs and run pyright (node). Easier/faster alt. to: inv check-pyright
+      - name: Check with pyright
+        uses: jakebailey/[email protected]
+        with:
+          version: 1.1.311