publish to pypi from release workflow

[dennisbader]

Checklist before merging this PR:

• Mentioned all issues that this PR fixes or addresses.
• Summarized the updates of this PR under Summary.
• Added an entry under Unreleased in the Changelog.

Summary

• PyPI package release is now part of the release workflow using secure Trusted Publishing via OpenID Connect (OIDC) (previously we had to publish locally using long lived API tokens).
• Simplifies publishing, as now all steps are automated
• Fixes Docker image publishing that published the previous version instead of the newly released version

Additional info

After the PyTorch Lightning incident from a couple of days ago, this would be the current standard for pubishing to PyPI via automated workflows. The PR is using the suggestions from here).

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.24%. Comparing base (2cfd941) to head (fff79d2).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3100      +/-   ##
==========================================
- Coverage   96.31%   96.24%   -0.07%     
==========================================
  Files         161      161              
  Lines       17350    17350              
==========================================
- Hits        16710    16699      -11     
- Misses        640      651      +11     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.