Use Trusted Publishing for Releases

[matt-boris]

Some docs here https://docs.pypi.org/trusted-publishers/

[petemoore]

Note we implemented for json-e recently, so the migration might look similar