Update publishing step to use hatch publish action

This is the recommended best practice, according to some.

.github/workflows/python-publish.yml

@@ -8,7 +8,8 @@ jobs:
   deploy:
 
     runs-on: ubuntu-latest
-
+    permissions:
+      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
     steps:
     - uses: actions/checkout@v4
     - name: Set up Python
@@ -18,11 +19,8 @@ jobs:
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        pip install hatch twine
-    - name: Build and publish
-      env:
-        TWINE_USERNAME: __token__
-        TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-      run: |
-        hatch build
-        twine upload dist/*
+        pip install hatch
+    - name: Build package
+      run: hatch build
+    - name: Publish package to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1