Use Trusted Publishing to upload to PyPI

I'm looking at reducing the risk of supply chain attacks on my project, which has tiktoken as a dependency. For details, see https://pydevtools.com/handbook/explanation/why-use-trusted-publishing-for-pypi/