Use Trusted Publisher for PyPI publishing

[pkalita-lbl]

Since we're already publishing via GitHub Actions for normal releases, we should take advantage of GitHub Actions' Trusted Publisher status on PyPI. This means:

• Add GitHub Actions as a Trusted Publisher via the PyPI interface
• Update the publish workflow in this repo to remove the use of a token