Use Trusted Publishing to upload to PyPI

I'm looking at reducing the risk of supply chain attacks on my project, which has this as a dependency.
For details, see https://pydevtools.com/handbook/explanation/why-use-trusted-publishing-for-pypi/

Start by reviewing the linked Trusted Publishing guidance and the repository's existing PyPI upload process; the issue does not name a file or workflow. Done means the project can upload its Python package to PyPI using Trusted Publishing and no longer relies on the current publishing credentials.

Written by the indexing model from the issue text.