[build] remove maintainer password from PyPI publish workflow in lieu of trusted publisher attestation

[zacharyburnett]

Resolves SCSB-199

• add a Trusted Publisher configuration to the PyPI project by visiting https://pypi.org/manage/project/roman-datamodels/settings/publishing/?provider=github&owner=spacetelescope&repository=roman_datamodels&workflow_filename=build.yml
• remove pypi_token (STScI PyPI maintainer password) from build workflow
• wait for issue with reusable workflows to be resolved in pypa/warehouse

Tasks

• Update or add relevant roman_datamodels tests.
• Update relevant docstrings and / or docs/ page.
• Does this PR change any API used downstream? (If not, label with no-changelog-entry-needed.)
  • Write news fragment(s) in changes/: echo "changed something" > changes/<PR#>.<changetype>.rst (see below for change types).
  • Start a romancal regression test (https://github.com/spacetelescope/RegressionTests/actions/workflows/romancal.yml) with this branch installed ("git+https://github.com/<fork>/rad@<branch>").

News fragment change types:

• changes/<PR#>.feature.rst: new feature
• changes/<PR#>.bugfix.rst: fixes an issue
• changes/<PR#>.doc.rst: documentation change
• changes/<PR#>.removal.rst: deprecation or removal of public API
• changes/<PR#>.misc.rst: infrastructure or miscellaneous change

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 97.84%. Comparing base (087a60d) to head (44e554e).
Report is 161 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #467      +/-   ##
==========================================
+ Coverage   97.56%   97.84%   +0.28%     
==========================================
  Files          30       40      +10     
  Lines        2788     4313    +1525     
==========================================
+ Hits         2720     4220    +1500     
- Misses         68       93      +25     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[braingram]

Is there any way to test this (like a mock release to test pypi)? If not, does @jhunkeler or someone else have permissions to see and confirm the pypi settings?

[PaulHuwe]

@zacharyburnett Is there an update for this ticket?

[zacharyburnett]

@zacharyburnett Is there an update for this ticket?

this is on hold unfortunately, there's an upstream issue in pypa/warehouse that has to be resolved first