Publish workflow uses unsupported Python 3.8 and obsolete wheel tags

Summary

setup.cfg declares python_requires = >=3.10 and the README now documents Python 3.10+, but .github/workflows/publish.yml still:

• hard-codes actions/setup-python to Python 3.8 despite a matrix of py37/py38/py39/py310
• asks bdist_wheel to emit py37, py38, py39, and py310 tags

A release therefore runs an unsupported interpreter and publishes artifacts whose tags do not match the declared minimum runtime.

Proposed fix

Drive setup-python from a supported 3.10-3.13 matrix and pair each interpreter with its correct wheel tag (py310, py311, py312, py313).

Evidence

• master commit: 9d57bcf9edea2486f214e190931de2a5537f23c1
• setup.cfg: python_requires = >=3.10
• .github/workflows/publish.yml: matrix py37-py310; setup-python hard-coded to 3.8

This is separate from closed #2405/#2464, which only corrected installation documentation.