Trigger member profile synchronization after public main CI

[VolkerChristian]

After successful existing CI checks on pushes to public main (including PR merges) and manual runs on main, send sync-organization-profile to .github-private. The private repository owns synchronization and always pulls public main; PR draft content is never published. Unmerged PRs retain all validation and do not dispatch.

Files: .github/workflows/ci.yml, README.md.

Deployment: merge the receiver PR in .github-private first. Configure ORG_PROFILE_TOKEN in this repository (fine-grained token, Contents read/write on .github-private); GitHub's repository-scoped default token cannot dispatch to another repository. No credential was copied from the local gh session, and no secret or setting was changed.

Verification:

• python3 tools/snodec_sync check: passed.
• python3 tools/snodec_sync profile and git diff --exit-code profile/README.md: passed.
• python3 -m unittest discover -s tests -v: 71 tests passed.
• python3 tools/snodec_sync page-headers --repo . --check: passed.
• python3 tools/snodec_sync docs-audit --repo .: 0 violations.
• YAML parse and git diff --check: passed.
• Receiver's actual workflow shell exercised against a local bare Git remote: publishing, stale-asset deletion, unrelated-file preservation and idempotent rerun passed.

Production workflow growth: +14 lines, explicitly requested dispatch mechanism; test code: 0 lines; docs: +2 lines. No parallel generator or publication logic in the public repository. No manual workflow dispatch performed.