Use PyPI Trusted Publishers for publishing to PyPI

[dataflake]

The c-code PyPI publishing step for the manylinux job keeps emitting reminders about PyPI Trusted Publishers to stop using hardcoded credentials in the workflow. The linked document at https://docs.pypi.org/trusted-publishers/ makes it sound like this isn't hard, but it does require touching the affected package's PyPI settings before the changed GHA tests configuration can work.

Right now only the c-code template publishes to PyPI. If it works there I suggest adding a publishing step when a tag is set to all templates. Saves some of the manual work when making releases.

[icemac]

This issue looks like a duplicate of #198 which also has a link to an example how other people did this.

[dataflake]

Duplicate of #198