Publish issue title monorepo suffix breaks owner/repo parsing

Craft titles like publish: getsentry/relay/py@0.9.26 have a subdirectory path suffix. Naive sed 's/^publish: \(.*\)@.*/\1/p' extracts getsentry/relay/py — causes 404 on every GitHub API call (repos/getsentry/relay/py/... isn't a valid repo). Fix: match only first two path segments: sed -n 's|^publish: \([^/]*/[^/@]*\).*@.*|\1|p'. Applies to any workflow parsing publish issue titles (ci-poller.yml, auto-approve.yml, craft-action.yml's request-publish step).