Following recent discussions, this changes the development process as follows:
1. The deploy is now manually triggered after the release PR is approved.
2. The deploy workflow tags the repository only after the package has been published to PyPI.
3. Use PyPI trusted publishers instead of API tokens.
Co-authored-by: Ran Benita <ran@unusedvar.com>