We should look into migrating our publishing workflow to this: https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/