[kridai]

Part of DII-2638 (epic DII-2636). Mirrors the OSS publishing changes in twilio-python / twilio-csharp and the other SendGrid repos.

Changes

• test-and-deploy.yml: ubuntu-x64 runners, github.repository_owner == 'sendgrid' guards, least-privilege permissions, actions pinned to SHAs, production environment on deploy, GitHub release via twilio/sdk-actions/github-release; Datadog and Slack steps commented out as in the other SendGrid repos. Docker Hub login steps dropped.
• PHP: Composer/Packagist picks up tags automatically, so deploy builds the release zip and creates the GitHub release (no publish credentials). DII-2562 (PHP 8.5 curl_close fix from chore: fix php 8.5 deprecation warning #176, merged but untagged) can be released as a patch once this merges.
• CI matrix keeps the repo's existing PHP versions.
• pr-lint.yml pinned (twilio/sdk-actions/semantic-pr-title); added dependabot.yml.

Not verified

Workflows were only validated as YAML and have not run on Actions. Before releasing: the production environment and ARTIFACTORY_URL variable must exist for this repo, and ubuntu-x64 needs the tooling the Makefile uses (docker where make test-docker is used). Library/package version support is not changed by this PR.

🤖 Generated with Claude Code