Context

We should use PyPI trusted publishing to publish our artifacts, removing the need for local credentials.

Definition of done

winkerberos release artifacts can be published without local credentials by any member of the dbx-python team.

Pitfalls

This will require us to build the wheels in GitHub Actions, and then publish them from a GitHub Actions Environment. When we later add artifact signing, the signing credential will need to be added as an Environment Secret.