ci: Add ability to use trusted-publishing for PyPI

- Add Publish workflow to run on release tags to upload package to PyPI
- Add Build of packages to end of Default CI/CD workflow when on master
  branch.

.github/workflows/default.yml

@@ -74,3 +74,25 @@ jobs:
       - name: Run tests
         run: |
           pytest
+  build:
+    needs: test
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/master'
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - name: Set up Python 3.x
+        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
+        with:
+          python-version: 3.x
+      - name: Install build dependencies
+        run: |
+          python -m pip install --upgrade pip setuptools build
+      - name: Build package
+        run: |
+          python -m build
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error