ci: trusted publish (#480)

* trusted publish

* ci: trusted publish

* ci: trusted publish

* [pre-commit.ci] auto fixes from pre-commit.com hooks

for more information, see https://pre-commit.ci

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Author: andrzejnovak

.github/workflows/cd.yml

@@ -3,27 +3,22 @@ name: CD
 on:
   workflow_dispatch:
   pull_request:
+  push:
     branches:
-    - master
+      - master
   release:
     types:
-    - published
+      - published
 
 jobs:
   dist:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-
-    - name: Build wheel and SDist
-      run: pipx run build
-
-    - uses: actions/upload-artifact@v3
-      with:
-        path: dist/*
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
-    - name: Check metadata
-      run: pipx run twine check dist/*
+      - uses: hynek/build-and-inspect-python-package@v2
 
   publish:
     needs: [dist]