Add test publish step

Build and publish a test version of the package to TestPypi on every
build.

Author: lvoliveira

.github/workflows/main.yml

@@ -50,9 +50,7 @@ jobs:
       - name: Test
         run: pixi run lint
 
-  deploy:
-
-    if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags')
+  build:
 
     runs-on: ubuntu-latest
 
@@ -66,11 +64,57 @@ jobs:
       - name: Build package
         run: |
           pixi run -e build build
-      - name: Publish package to PyPI
+      - name: Archive build artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: |
+            dist
+
+  pypi-test-publish:
+    name: Test upload release sending package to TestPyPI
+    runs-on: ubuntu-latest
+    needs: build
+    environment:
+      name: testpypi
+      url: https://test.pypi.org/p/serialchemy
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+    steps:
+      - name: Load build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: |
+            dist
+
+      - name: Publish package distributions to TestPyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          user: __token__
-          password: ${{ secrets.pypi_token }}
+          repository-url: https://test.pypi.org/legacy/
+
+  pypi-publish:
+
+    if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags')
+
+    name: Test upload release sending package to TestPyPI
+    runs-on: ubuntu-latest
+    needs: build
+    environment:
+      name: pypi
+      url: https://pypi.org/p/serialchemy
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+    steps:
+      - name: Load build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: |
+            dist
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
 
   sonarcloud: