Use trusted publisher and the official pypi job to publish releases

[Pierre-Sassoulas]

Current problem

We currentely use a long lived token that could potentially be compromised. 2 days ago pypi introduced a new mechanism in order to delegate trust to github, which is then authorized to request short-lived, tightly-scoped API tokens from PyPI.

Desired solution

Use pypa/gh-action-pypi-publish@release/v1 instead of what we currently have.

Additional context

https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/

[cdce8p]

Done in #10263
See duplicate issue #10256