Publishing to PyPI: Update from tokens to Trusted Publishers

[jamadden]

See https://docs.pypi.org/trusted-publishers/

Open question: What will this do to twine from the command line? Not all wheels always get published from GHA or AppVeyor; sometimes I need to publish wheels manually.