Setup trusted publishing on PyPI

[grst]

as this is now in the scverse or, we'll setup a trusted publishing workflow with PyPI. This will automatically upload release artifacts to PyPI once a release is created on github.