fix: gate PyPI publish jobs on CI completion in release workflow (#12168)

fix: gate PyPI publish jobs on CI completion

The publish-base, publish-main, and publish-lfx jobs were not waiting
for the CI workflow to complete before publishing to PyPI. This could
result in broken packages being published if CI fails. Docker builds
already correctly depend on CI.

Add 'ci' to the needs array of all three publish jobs so packages
are only published after the full test suite passes.