chore: Wired up changelog syncing to the new sync workflow in hive-kube

.github/workflows/sdk-publish.yml

@@ -331,14 +331,38 @@ jobs:
           echo "- ✅ Published to PyPI" >> $GITHUB_STEP_SUMMARY
           echo "- ✅ GitHub release created" >> $GITHUB_STEP_SUMMARY
 
-      - name: Trigger docs changelog sync
+      # Mint a Propolis-app token scoped to hive-kube so we can POST to
+      # repos/honeyhiveai/hive-kube/actions/dispatches. The default
+      # GITHUB_TOKEN is scoped only to this repo and can't dispatch
+      # cross-repo.
+      - name: Generate Propolis token for hive-kube dispatch
+        if: steps.check_pypi.outputs.exists == 'false'
+        id: app-token
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        with:
+          app-id: ${{ vars.PROPOLIS_APP_ID }}
+          private-key: ${{ secrets.PROPOLIS_PRIVATE_KEY }}
+          owner: honeyhiveai
+          repositories: hive-kube
+
+      # Fires the unified clients-changelog sync workflow in hive-kube. The
+      # workflow regenerates clients.mdx from the current state of the three
+      # CHANGELOG.md files in hive-kube; the client_payload only labels the
+      # resulting docs PR so reviewers can tell which publish triggered it.
+      # A failure here (typically 403 if the Propolis app isn't granted
+      # actions:write on hive-kube) fails the workflow so the missing docs
+      # PR isn't silent.
+      - name: Trigger clients changelog sync on hive-kube
         if: steps.check_pypi.outputs.exists == 'false'
-        continue-on-error: true
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          SYNC_REF: ${{ github.event.inputs.branch || github.ref_name }}
-          VERSION: v${{ steps.get_version.outputs.version }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+          UPSTREAM_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
         run: |
-          echo "🚀 Dispatching docs changelog sync for $VERSION on $SYNC_REF..."
-          gh workflow run sync-changelog-to-docs.yml --ref "$SYNC_REF" -f version="$VERSION"
-          echo "✅ Docs changelog sync dispatched"
+          set -euo pipefail
+          jq -n --arg url "$UPSTREAM_RUN_URL" '{
+            event_type: "clients-changelog-sync",
+            client_payload: {
+              source: "python-sdk",
+              upstream_run_url: $url
+            }
+          }' | gh api repos/honeyhiveai/hive-kube/actions/dispatches --input -