add deploy workflow for hatch-vcs-tunable (#8)

This will use tags that match a prefix pattern to trigger a deploy to
pypi, using the pypi trusted deploy OIDC connector (configuration is on
pypi's side) to do so without needing to save credentials.

Author: sfoster1

.github/workflows/publish-hatch-vcs-tunable.yml

@@ -0,0 +1,27 @@
+name: 'publish hatch-vcs-tunable'
+on:
+  push:
+    tags:
+      - 'hatch-vcs-tunable@*'
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment:
+      name: hatch-vcs-tunable-pypi-release
+      url: https://pypi.org/p/hatch-vcs-tunable
+    permissions:
+      id-token: write
+    steps:
+    - name: Fetch source for package build
+      uses: actions/checkout@v3
+    - name: Build distribution
+      run: |
+        python -m pip install hatch
+        hatch build
+      working-directory:
+        hatch-vcs-tunable
+    - name: Publish package distributions to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+      with:
+        packages-dir: hatch-vcs-tunable/dist