Setup trusted publishing on PyPI

[terraputix]

PyPI supports trusted publishing: https://docs.pypi.org/trusted-publishers/. This would allow us to get rid of the PYPI_TOKEN in release.yml.