Today we cannot easily publish contributor PRs as canaries because the workflows don't have access to our GitHub secrets (which is fine).
Instead we should have a way of pinging a bot that will import the branch into our repository and then release canary from there, and then comment on the original PR.