Deploy using Trusted Publishers and native GitHub Actions

[MattiSG]

We currently deploy using PYPI_TOKEN. A more secure alternative is the use of Trusted Publishers, which would also enable using pypa/gh-action-pypi-publish@release.

This however entails identifying an alternative to checking if PYPI_TOKEN is defined as a way to activate continuous deployment, as was introduced in #147.