[Feature]: Switch to using Trusted Publisher on PyPI instead of a API token

[pauladkisson]

What would you like to see added to ROI Extractors?

The new standard for publishing a package to PyPI is using trusted publishing.

All you have to do is

1. Go to https://pypi.org/manage/project/roiextractors/settings/publishing/ and add the github workflow as a trusted publisher
2. Update the workflow to use 'attestation' instead of API token (see example here)

I'd do it myself, but I don't have the requisite permissions on PyPI.

Do you have any interest in helping implement the feature?

Yes.

Code of Conduct

• I agree to follow this project's Code of Conduct
• Have you ensured this bug was not already reported?