Only push to PyPI once per release

[TShapinsky]

last release our CD tried to push to pypi thrice.

We should narrow our event hooks to make this once.

[MatthewSteen]

Need to add...

on:
  release:
    types: published

https://github.com/orgs/community/discussions/25029