Reinstate auto-publishing of packages to PyPi from GH Actions

[stevejalim]

When we used Travis CI, we had a step that would publish a new release of a given project to PyPi if a version bump was detected when merging to main/master

For projects using GH Actions for their CI, we should reinstate this and should check we're doing everything the old Travis integration was doing

• [x] https://github.com/mozmeao/django-allow-cidr/pull/24
• [x] https://github.com/mozilla/django-product-details/pull/87
• [x] https://github.com/mozmeao/django-jinja-markdown/pull/4

[stevejalim]

It looks like pypa's own action is in use elsewhere in Mozilla and is on our allowed list, so we won't need to fork it to mozmeao: https://github.com/marketplace/actions/pypi-publish

[stevejalim]

@pmac Would you mind moving django-jinja-markdown from your PyPi account to mozmeao (or just provide me with an upload token that we can use from GH Actions). Thanks! 🎸

[pmac]

I'll add mozmeao to it.

[pmac]

Invite sent

[stevejalim]

Thanks (but I didn't expect a reply on a weekend 😬). When you're back on Monday, looks like we need to make mozmeao the owner if we want to generate an API token from that mozmeao account

[stevejalim]

Separately, looks like I'll need admin perms on https://github.com/mozilla/django-product-details to add the PYPI_API_TOKEN secret (or have an existing admin do it, if I can't be upgraded)