Introduce token-based authentication for PyPI

[mh-northlander]

Currently we use user/pass for PyPI authentication (python-publish.yaml).
We should use api-token.

ref:
https://github.com/pypa/gh-action-pypi-publish
https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/