ci(docs): publish 26.8.1 docs.nvidia.com from main

[kheiss-uwzoo]

Summary

• Build docs.nvidia.com content from main and publish as 26.8.1 / latest.
• Fail closed: non-workflow_dispatch events cannot write S3 or move latest/ (the Aug 19 leak).
• Keep 26.5.0 and 26.3.0 in the version picker.

Test plan

• PR checks green
• Merge this PR before the live publish (main still checks out tag 26.08)
• Dry-run, then live workflow_dispatch with version 26.8.1 and publish-as-latest: true

[greptile-apps]

Greptile Summary

The PR updates the manual docs.nvidia.com publishing workflow to build from the triggering commit, publish the 26.8.1 release metadata, and fail closed for any future non-manual event.

• Forces non-workflow_dispatch runs into dry-run mode without moving latest/.
• Uses one pinned workflow commit for documentation content and version-picker metadata.
• Restores 26.5.0 alongside 26.8.1 and 26.3.0 in the version picker.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
.github/workflows/nrl-docs-nvidia-publish.yml	Updates source-revision handling and adds a fail-closed non-dispatch guard while retaining explicit manual publication controls.
docs/publish/versions.json	Adds the existing 26.5.0 documentation release to the picker while retaining 26.8.1 as latest.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    Dispatch[Manual workflow dispatch] --> Resolve[Resolve version and publish inputs]
    Other[Future non-dispatch event] --> Closed[Force dry-run and disable latest update]
    Resolve --> Checkout[Checkout triggering commit]
    Closed --> Checkout
    Checkout --> Build[Build MkDocs site]
    Build --> Metadata[Copy versions.json into artifact]
    Metadata --> Publish[Invoke docs publishing action]
    Publish --> Version[Publish versioned documentation]
    Publish --> Latest{Publish as latest?}
    Latest -->|Explicit manual selection| Alias[Update latest alias]
    Latest -->|No or dry-run| Preserve[Preserve current latest alias]

Loading

_{Reviews (5): Last reviewed commit: "ci(docs): pin publish checkout to the tr..." | Re-trigger Greptile}