Upgrade PyPI publishing infrastructure

[sethmlarson]

• Adopt Trusted Publishers.
• Add a second maintainer to PyPI for parity.
• Move publish action to a separate workflow file. Require review from python-hyper admins to change this file or any others that affect publish workflow via CODEOWNERs.
• Create a GitHub Environment with at least 2 approving reviews to execute publish action from tag.