Add missing permission and publish step to the pypi action

[bryborge]

No description provided.

[ThirteenFish]

It looks like this is from the docs but following "The manual way" section instead of "The easy way" section. The manual way has this description:

STOP! You probably don't need this section; it exists only to provide some internal details about how GitHub Actions and PyPI coordinate using OIDC. If you're an ordinary user, it is strongly recommended that you use the PyPA's pypi-publish action instead.

Is there a reason to not just take the easy way instead or am I misunderstanding the process?

[bryborge]

Is there a reason to not just take the easy way instead or am I misunderstanding the process?

Nope, the misunderstanding was mine! I somehow scrolled past the easy way (and missed all the bright orange warnings). 😆