Publish workflow uses unsupported Python 3.8 and obsolete wheel tags

## Summary
`setup.cfg` declares `python_requires = >=3.10` and the README now documents Python 3.10+, but `.github/workflows/publish.yml` still:

- hard-codes `actions/setup-python` to Python 3.8 despite a matrix of py37/py38/py39/py310
- asks `bdist_wheel` to emit py37, py38, py39, and py310 tags

A release therefore runs an unsupported interpreter and publishes artifacts whose tags do not match the declared minimum runtime.

## Proposed fix
Drive setup-python from a supported 3.10-3.13 matrix and pair each interpreter with its correct wheel tag (py310, py311, py312, py313).

## Evidence
- master commit: 9d57bcf9edea2486f214e190931de2a5537f23c1
- `setup.cfg`: `python_requires = >=3.10`
- `.github/workflows/publish.yml`: matrix py37-py310; setup-python hard-coded to 3.8

This is separate from closed #2405/#2464, which only corrected installation documentation.