Add a workflow to deploy a PyPI release on tag

.github/workflows/deploy-release.yml

@@ -0,0 +1,22 @@
+name: Deploy release
+on:
+  push:
+    tags:
+      - '*'
+jobs:
+  pypi:
+    permissions:
+      id-token: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.11'
+      - name: Install dependencies
+        run: pip install -U build
+      - name: Build package
+        run: python -m build
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

.tools/release.sh

@@ -11,5 +11,4 @@ hatch build
 git add */__init__.py
 git commit -m "v$1"
 git tag -a -m "" "v$1"
-hatch publish
 git push origin master --tags