Use trusted publisher to publish to PyPI

[cortadocodes]

Contents (#70)

Operations

• Use trusted publisher to publish to PyPI in cd workflow
• Test publishing to PyPI in ci workflow
• Add semantic version checker job to ci workflow
• Only run ci workflow on non-draft pull requests, and additionally trigger on ready_for_review event
• Use latest snok/install-poetry, actions/checkout, and actions/setup-python actions