Use github OIDC for package uploads

[Xuanwo]

Let's use github OIDC for package uploads (so we don't need static tokens): https://github.com/apache/opendal/blob/6ca3eabc0cc5ad2b5e123acc215b62329bbdbf18/.github/workflows/release_python.yml#L105-L130

We can also upload to https://test.pypi.org/legacy/ to test and verify.

But I believe they are good to have in the future and not a blocker of merging this PR.

Originally posted by @Xuanwo in #20 (comment)

[Xuanwo]

I published a place-holder version for opendalfs. I have invited @martindurant as the owner.

The Trusted Publisher also been added, we only need to have the following workflow:

[martindurant]

I am happy to be an owner, but in practice the actual contributors of this repo know much more about it than I do.