chore: Use trusted publishing for PyPi package

Speakeasy doesn't support it out of the box, but we can manully
mint a short-lived API token using OIDC which we then pass to
speakeasy. This allows us to remove the long-lived API token
from our CI variables.