pypi: use trusted publishing for binary wheels

[bjlittle]

🚀 Pull Request

Description

PyPI now supports Trusted Publishing, which is an OIDC-based "tokenless" authentication mechanism for uploading to the index from within a CI/CD workflow.

This "tokenless" flow has significant security benefits over a traditional manually configured API token, and should be preferred wherever supported and possible.

This pull-request also requires PyPI (and Test PyPI) to be configured for Trusted Publishing for the scitools-iris project, which has already been performed.

Reference:

• Trusted Publishers for all Package Repositories
• Publishing to PyPI with a Trusted Publisher

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 89.90%. Comparing base (368d8e7) to head (c56b169).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #6543   +/-   ##
=======================================
  Coverage   89.90%   89.90%           
=======================================
  Files          90       90           
  Lines       24153    24153           
  Branches     4496     4496           
=======================================
  Hits        21714    21714           
  Misses       1679     1679           
  Partials      760      760           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[bjlittle]

@tkknight Awesome, cheers 👍

[trexfeathers]

Since you weren't there to hear it in the Peloton: thanks @tkknight for taking this on 🙏. I had been a bit ambitious offering to find time for this!