Add a publish stage, that uses poetry publish on a secure runner to
push a release to pypi.org upon tagging. For this we make use of an
access token configured for the project via the environment variable
POETRY_PYPI_TOKEN_PYPI.
Fixes #4 (closed)