- Replace static version = "2.0.0" with dynamic versioning via
  setuptools-scm; version is derived from git tags (v2.1.0 → 2.1.0)
- Add .github/workflows/release.yml triggered on v* tag pushes:
  builds sdist + wheel and publishes to PyPI using OIDC trusted
  publisher (no API token secrets required)

To publish a release:
  git tag v2.1.0 && git push --tags

One-time PyPI setup required:
  https://pypi.org/manage/account/publishing/
  owner: seifreed, repo: BannedFuncDetector,
  workflow: release.yml, environment: pypi

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>