Add signatures to releases published on pypi

[actualwitch]

Should be pretty straightforward to do using twine

[actualwitch]

also add a trusted publisher https://docs.pypi.org/trusted-publishers/adding-a-publisher/