Should we use Trusted Publishers to publish to PyPI?

[MaxGhenis]

See this warning: https://github.com/PolicyEngine/policyengine-us/actions/runs/8562057477/job/23464549454#step:8:21

We currently pass a username/password:

policyengine-us/.github/workflows/push.yaml

Lines 96 to 101 in 63e0693

	- name: Publish a Python distribution to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	user: __token__
	password: ${{ secrets.PYPI }}
	skip_existing: true

@nikhilwoodruff should we switch? Let's convert this to an issue if so.