Set up OIDC / trusted publishers

[bunny-therapist]

See https://docs.pypi.org/trusted-publishers/

[bunny-therapist]

Should probably set up environments: https://docs.github.com/en/actions/deployment/targeting-different-environments/using-environments-for-deployment