PyPI Trusted Publishing (OIDC) for create-awesome-python-app #58

Summary

Publish wheels/sdists with OIDC — no long-lived PyPI token.

CNA mapping

CNA: npm Trusted Publishing via OIDC in publish.yml (no NPM_TOKEN).

Acceptance criteria

• Trusted publisher configured (documented steps)
• Workflow publishes on release tags
• Package name create-awesome-python-app

Blocked by

none

Blocks

none

Reference

Parity matrix (workspace): knowledge/create-python-app-parity-matrix.md
Reference repo: https://github.com/Create-Node-App/create-node-app

Parent epic

#9