use pypa/gh-action-pypi-publish

[samuelcolvin]

I'd like to use this flow for all important projects, and delete the PyPI token.

@davidhewitt I think there was some discussion of whether this would work for rust packages, please confirm?

[codspeed-hq]

CodSpeed Performance Report

Merging #1599 will not alter performance

_{Comparing user-release-env (6964025) with main (e7c5dc7)}

Summary

✅ 157 untouched benchmarks

[davidhewitt]

Yep should be fine, we use it in jiter.