ci: add workflow_dispatch job to bump version and commit certify artifacts

[cobycloud]

Motivation

• Provide a manual CI entrypoint to increment the package version, run the final certification aggregation, materialize certification artifacts, and publish those artifacts back to the repository in a single, repeatable workflow.

Description

• Add a new GitHub Actions workflow at .github/workflows/ci-certify-artifacts-dispatch.yml that triggers on workflow_dispatch and exposes inputs for bump strategy (dev|patch|minor|major) and an optional commit message.
• Implement an inline Python step that updates pyproject.toml version strings supporting both .devN and plain semver formats and exposes the old/new values via step outputs.
• Run certification aggregation via tox -e py311-final-certification, collect generated outputs into artifacts/certify/** (including docs/compliance, dist/validated-runs, dist/install-substrate, dist/runtime-smoke, dist/migration-portability, and dist/test-reports), and persist the results back to the branch (workflow requires contents: write).
• Workflow includes a PostgreSQL service for certification lanes, installs the toolchain via python -m pip install --upgrade pip tox uv, and performs safe no-op behavior when there are no changes to persist.

Testing

• No automated tests were run as part of this PR; CI will exercise the new workflow when manually dispatched and existing repository test lanes remain unchanged.

---

Codex Task