 Set up secretless publishing to PyPI

[webknjaz]

What do these changes do?

$sbj + this also implements sigstore signing of the artifacts.

Are there changes in behavior for the user?

Nope.

Related issue number

N/A

Checklist

• I think the code is well written
• Unit tests for the changes exist
• Documentation reflects the changes
• If you provide code modification, please add yourself to CONTRIBUTORS.txt
  • The format is <Name> <Surname>.
  • Please keep alphabetical order, the file is sorted by names.
• Add a new news fragment into the CHANGES folder
  • name it <issue_id>.<type> for example (588.bugfix)
  • if you don't have an issue_id change it to the pr id after creating the pr
  • ensure type is one of the following:
    • .feature: Signifying a new feature.
    • .bugfix: Signifying a bug fix.
    • .doc: Signifying a documentation improvement.
    • .removal: Signifying a deprecation or removal of public API.
    • .misc: A ticket has been closed, but it is not of interest to users.
  • Make sure to use full sentences with correct case and punctuation, for example: "Fix issue with non-ascii contents in doctest text files."

[codecov]

Codecov Report

Merging #7359 (9beaf2d) into master (3a54d37) will decrease coverage by 0.33%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master    #7359      +/-   ##
==========================================
- Coverage   97.27%   96.95%   -0.33%     
==========================================
  Files         106      106              
  Lines       31402    31402              
  Branches     3925     3925              
==========================================
- Hits        30547    30446     -101     
- Misses        650      744      +94     
- Partials      205      212       +7     

Flag	Coverage Δ
CI-GHA	96.92% <ø> (-0.31%)	⬇️
OS-Linux	96.89% <ø> (ø)
OS-Windows	?
OS-macOS	96.58% <ø> (ø)
Py-3.10.11	?
Py-3.10.12	96.78% <ø> (ø)
Py-3.11.0	96.52% <ø> (-0.01%)	⬇️
Py-3.8.10	?
Py-3.8.17	96.72% <ø> (ø)
Py-3.9.13	?
Py-3.9.17	96.74% <ø> (ø)
Py-pypy7.3.11	94.22% <ø> (-0.02%)	⬇️
VM-macos	96.58% <ø> (ø)
VM-ubuntu	96.89% <ø> (ø)
VM-windows	?

Flags with carried forward coverage won't be shown. Click here to find out more.

see 14 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[patchback]

Backport to 3.8: 💚 backport PR created

✅ Backport PR branch: patchback/backports/3.8/7911f1e9542afd0623b61f75c5e367c3c0e185bd/pr-7359

Backported as #7360

🤖 @patchback
I'm built with octomachinery and
my source is open — https://github.com/sanitizers/patchback-github-app.

[patchback]

Backport to 3.9: 💚 backport PR created

✅ Backport PR branch: patchback/backports/3.9/7911f1e9542afd0623b61f75c5e367c3c0e185bd/pr-7359

Backported as #7361

🤖 @patchback
I'm built with octomachinery and
my source is open — https://github.com/sanitizers/patchback-github-app.