[ci] First publish to Test PyPI without attestations

Author: aschuh-hf

.github/workflows/release.yml

@@ -43,9 +43,6 @@ jobs:
           twine check dist/*
         env:
           SETUPTOOLS_SCM_PRETEND_VERSION: ${{ env.version }}
-      - name: Publish packages to PyPI
-        if: github.event_name == 'release'
-        uses: pypa/gh-action-pypi-publish@release/v1
       - name: Publish packages to Test PyPI
         if: ${{ github.event_name == 'release' || (github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/pypi')) }}
         uses: pypa/gh-action-pypi-publish@release/v1
@@ -55,3 +52,6 @@ jobs:
           # See also issue https://github.com/pypa/gh-action-pypi-publish/issues/283 when using gh-action-pypi-publish twice.
           attestations: false
           skip-existing: true
+      - name: Publish packages to PyPI
+        if: github.event_name == 'release'
+        uses: pypa/gh-action-pypi-publish@release/v1