Update deploy.yml to use trusted publisher mechanism

[jni]

Updates the deploy action to use recent versions of upstream actions, and deploy using the PyPI Trusted Publisher mechanism.

I have already updated the package on PyPI to allow this script as a Trusted Publisher.

List of commits:

• Update actions versions
• .[doc] in quotes for consistency
• Remove PyPI token -- use trusted publisher instead
• Use tag-name as in napari/napari#6359

[jni]

@Czaki I would appreciate your review re these updates — I think if they are correct we should merge and push the v0.3.0 tag again.

[melissawm]

Sorry, I think https://github.com/napari/napari-sphinx-theme/blob/4f28aa4077e77b0550783fe8ae91cbc7547d6453/napari_sphinx_theme/__init__.py#L6 should also be updated to read "0.3.0"

[jni]

I do notice that the equivalent section in napari/napari also has:

oops! I noticed it and then I forgot to transfer it over. 🤦

@melissawm I'll update the version in a subsequent PR I think.

[jni]

grrr the workflow is not valid

[jni]

See #137