PyPI access cleanup and 2FA 

Hi all, after a security review I have cleaned up the PyPI access list, keeping only those folks who met the following criteria:

1. Has been at least a little bit of activity in the last 24 months
2. Has 2FA enabled on PyPI

I'm of course happy to add anyone back if they want access. 2FA is necessary in 2024 though. 

I'll leave this admin issue open for a bit for visibility.