Update deploy

[billbrod]

Adds a bunch of checks to deploy, and switches to using trusted publishing. Also adds ability trigger deploy on workflow_dispatch, deploying to test pypi instead

Updates checkout to make sure we get all the git tags, necessary for setuptools_scm

The deploy action now builds both sdist and wheels, and then:

• check only one version of sdist and wheel were created
• check that the version tag in the sdist file name matches the most recent git tag (only when triggered by github release)
• check that we can install from wheel
• run tests
• install ffmpeg (necessary for notebooks)
• run notebooks
• upload artifact
• upload to either PyPI or Test PyPI, depending on whether action was triggered by release or not.

Because of the tests/notebooks, this now takes longer to run, but should be safer

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 88.53%. Comparing base (cad4606) to head (84595c9). Report is 1 commits behind head on main.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #258 +/- ## ======================================= Coverage 88.53% 88.53% ======================================= Files 38 38 Lines 3410 3410 ======================================= Hits 3019 3019 Misses 391 391 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.