Consider using trusted publishing to PyPI instead of API tokens

[danielhollas]

https://docs.pypi.org/trusted-publishers/

[danielhollas]

Should we relatively easy to setup for somebody with access to the PyPI account

https://pypi.org/manage/account/publishing/

[danielhollas]

Once the setup on PyPI is complete, the workflow file should be updated according to

https://github.com/pypa/gh-action-pypi-publish?tab=readme-ov-file#trusted-publishing

Once verified that it works, the secret API tokens should be deleted from the Github Environment.