Add a release workflow based on tags

[offbyone]

Depends on hatch-scm to perform the versioning

• runs full suite of tests
• releases the current tag

Only set up for test PyPi right now; once this is verified working, we'll switch to release PyPi