Replace release.py with OIDC publishing

[alex]

We are now in the PyPI OIDC publishing beta

[alex]

When this is merged it needs to be configured at https://pypi.org/manage/project/cryptography/settings/publishing/

[alex]

Plan of action:

• Add support for workflow_dispatch and publishing to Test PyPI
• Get ownership of the Test PyPI package
• Merge
• Do a test run publishing to Test PyPI, rinse and repeat until successful
• Re-enable the workflow_run path
• Configure on PyPI.

[di]

@alex, What's your TestPyPI username? I'll need to put you in the beta there too but don't see an alexgaynor user.

[alex]

@di I didn't have one, I've just created one with the same name (alexgaynor).

(I also don't currently own the "cryptography" package on Test PyPI, but I've emailed the current owner to see if I can get it.)

[di]

Thanks, I put you in the beta and also made you owner of the TestPyPI package.

[alex]

Swell, thanks!

[alex]

Test PyPI is now configured for this workflow, just need a review from @reaperhulk

[reaperhulk]

let the experiment begin

[webknjaz]

@alex any reason you didn't go for https://github.com/marketplace/actions/pypi-publish#trusted-publishing that embeds the OIDC logic?

[webknjaz]

Ah.. you made this 5 days before pypa/gh-action-pypi-publish#123 got merged.