fix: register config command in lazy loading map and add CI workflow

[tomaz-lc]

Details

Fixes CI failures (both GHA and Cloud Build) caused by PR #257 (config directory consolidation) and PR #261 (lazy command loading) being merged independently - the config command was not registered in the lazy loading map.

Also adds a CI workflow and upgrades both workflows with latest action versions, minimum permissions, and Python version matrix testing.

I will take the liberty to merge these fixes directly so I can publish a new release.

Fixes

1. config_cmd missing from _COMMAND_MODULE_MAP - PR feat: consolidate config files into ~/.limacharlie.d/ directory #257 added config_cmd.py but PR feat: lazy command loading for faster CLI startup #261 replaced auto-discovery with a static map that didn't include it. All test_config_cmd.py tests failed with "No such command 'config'". Fixed by adding "config": ("config_cmd", "group") to the map.

2. Regression test snapshots out of date - EXPECTED_TOP_LEVEL_COMMANDS, EXPECTED_MODULE_MAP, and EXPECTED_SUBCOMMANDS in test_cli_lazy_loading_regression.py were missing the config command.

3. test_cli_import_does_not_load_output flaky in shared process - The test asserted jmespath not in sys.modules after a fresh limacharlie.cli import, but jmespath could already be loaded by other tests earlier in the same pytest process. Fixed by tracking pre-existing modules and only asserting on newly imported ones.

CI improvements

4. New ci.yml workflow - Runs unit tests on PRs targeting master/cli-v2 and pushes to those branches. Tests across all supported Python versions (3.9-3.14) with fail-fast: false. Includes minimum permissions (contents: read) and concurrency with cancel-in-progress: true. Uses concurrency group keyed on PR number to avoid duplicate runs for push + pull_request events.

5. Publish workflow matrix tests - publish-to-pypi.yml now runs unit tests across all supported Python versions (3.9-3.14) before building and publishing. Added workflow-level permissions: contents: read with job-level overrides only for the publish job.

6. Latest GHA action versions - Updated both workflows to use latest action versions:

   • actions/checkout v4 -> v6
   • actions/setup-python v5 -> v6
   • actions/upload-artifact v4 -> v7
   • actions/download-artifact v4 -> v8

Blast radius / isolation

• limacharlie/cli.py - one line added to static map
• tests/unit/test_cli_lazy_loading_regression.py - snapshot updates only
• tests/microbenchmarks/test_cli_startup_microbenchmark.py - test isolation fix
• .github/workflows/ci.yml - new workflow file
• .github/workflows/publish-to-pypi.yml - matrix tests, permissions, action version upgrades

Performance characteristics

No impact.

Notable contracts / APIs

None.

Related PRs

• feat: consolidate config files into ~/.limacharlie.d/ directory #257 - Config directory consolidation (introduced config_cmd.py)
• feat: lazy command loading for faster CLI startup #261 - Lazy command loading (introduced _COMMAND_MODULE_MAP)