v2.0.0-rc4

Re-cut of 2.0.0-rc3 with a regenerated poetry.lock — rc3's publish-release-at-pypi job failed the Poetry lock-hash check (pyproject.toml changed after the last lock: jsonschema test dep + pytest plugin rename, without re-locking). No functional changes vs rc3 besides the lock file. See #458.