CI: Add trusted publishing for TestPyPI

Author: Puerling

.github/workflows/build_wheel.yml

@@ -89,3 +89,32 @@ jobs:
           with state.State(quiet=False) as p_state:
             pass
           EOF
+
+  deploy-testpypi:
+    name: Deploy to TestPyPI
+    needs: ['build_wheels', 'install_wheels']
+    environment: 'publish-testpypi'
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: cibw-wheels-ubuntu-latest
+          path: dist
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: cibw-wheels-macos-latest
+          path: dist
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: cibw-wheels-windows-latest
+          path: dist
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/