[AP-2965] update python package index publisher

[amofakhar]

Description of change

Context

https://transferwise.atlassian.net/browse/AP-2965

[platon-github-app-production]

Comment /request-review to automatically request reviews from the following teams:

• analytics-platform: notifications will be sent to #analytics-platform-public

You can also request review from a specific team by commenting /request-review team-name, or you can add a description with --notes "<message>"

💡 If you see something that doesn't look right, check the configuration guide.

[Copilot]

Pull request overview

Changes: Security improvement (1)

This PR updates the PyPI publishing workflow to use the modern OIDC-based publisher action instead of twine + long-lived PyPI credentials.

Changes:

• Replace setup.py/twine upload publishing with python -m build + pypa/gh-action-pypi-publish.
• Add id-token: write permissions to support OIDC authentication to PyPI.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.