Use CI to publish releases to PyPI

[Mr0grog]

Right now, I manually build and publish releases on PyPI after they’ve been tagged. While I haven’t made any horrible mistakes yet, it would generally be better if we had a CI job that automatically built, tested, and published new tags to PyPI for us, so it’s harder to get some spurious uncommitted code in the package or publish something that doesn’t actually pass tests.