Switch to PyPI Trusted Publishing, and remove twine

[GenevieveBuckley]

Closes #211

This PR switches to PyPI deployment with Trusted Publishing (see the announcement and how trusted publishing works). It removes twine, and also removes the need for PyPI API tokens being used as github secrets.

This PR is not sufficient on its own, someone else also needs to:

• Add a trusted publisher to our existing PyPI project (or you can create a new PyPI project with a trusted publisher).
• Delete the old PyPI API tokens, from both PyPI and the GitHub repository secrets settings.

[GenevieveBuckley]

PR marked as draft, so it doesn't get merged before someone enables trusted publishing on PyPI

[psobolewskiPhD]

99% sure trusted published was enabled for this repo, but not sure how to check.

[alisterburt]

Just run it and see, no big deal if it fails!

[jni]

it's enabled.

[jni]

Just run it and see, no big deal if it fails!

loss aversion is powerful stuff. 😂

https://www.nytimes.com/interactive/2015/07/03/upshot/a-quick-puzzle-to-test-your-problem-solving.html

[GenevieveBuckley]

CI tests failing, a fix is in progress here: #214

[alisterburt]

Just run it and see, no big deal if it fails!

loss aversion is powerful stuff. 😂

https://www.nytimes.com/interactive/2015/07/03/upshot/a-quick-puzzle-to-test-your-problem-solving.html

😆 thanks for this! Interesting read :)

[GenevieveBuckley]

PR #218 should fix the ruff CI errors

[jni]

😆 thanks for this! Interesting read :)

@alisterburt did you pass the test? I am sad to admit that I was one of the 77% of chumps who confidently guessed powers of 2 after a bunch of positive tests. 😬

The crazy thing is that I consciously think about that test/article often, but still suffer from it. I'll spend so much time setting things up just-so, even when there is literally no cost to failure. But I deeply don't want the computer-says-no message! Stupid brain! 🧠 😂

[jni]

@GenevieveBuckley wanna merge in main? 🙏 Then this should be ready to go in! 🚀

[GenevieveBuckley]

Ready to merge when the CI checks are all green.
Then we'll need someone to test a release candidate, to see if the PyPI trusted publishing works.