chore: publish to pypi through GHA

Author: azmeuk

.github/workflows/bundle.yml .github/workflows/release.yml.github/workflows/bundle.yml renamed to .github/workflows/release.yml

@@ -6,7 +6,28 @@ on:
       - '*'
 
 jobs:
+  build:
+    name: build dist files
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install Poetry
+        uses: snok/install-poetry@v1
+      - uses: actions/setup-python@v5
+        with:
+          python-version: 3.12
+          cache: 'poetry'
+      - name: build dist
+        run: poetry build
+      - uses: actions/upload-artifact@v3
+        with:
+          name: artifacts
+          path: dist/*
+          if-no-files-found: error
+
   bundle:
+    name: build binary files
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
@@ -40,6 +61,7 @@ jobs:
         if-no-files-found: error
 
   release:
+    name: create Github release
     needs: bundle
     runs-on: ubuntu-latest
     steps:
@@ -52,3 +74,23 @@ jobs:
         with:
           files:
             scim2-${{ github.ref_name }}-*/*
+
+  publish:
+    name: release to pypi
+    needs: build
+    runs-on: ubuntu-latest
+
+    environment:
+      name: pypi-release
+      url: https://pypi.org/project/scim2-cli/
+    permissions:
+      id-token: write
+
+    steps:
+      - uses: actions/download-artifact@v3
+        with:
+          name: artifacts
+          path: dist
+
+      - name: Push build artifacts to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1