ci: Add GitHub action to publish to PyPi and GH on tag

[mbeacom]

Issue number: N/A

Summary

Changes

Add automatic build / publish to pypi / release on GH on tag actions.

User experience

Maintainer pushes tag to GH resulting in:

• Execution of safety CVE checks on dependencies (fail if CVEs are found)
• Compare the current git tag (that triggered the action) against the current python module version (fail if they don't match)
• Build python module and publish to PyPi
• Publish GitHub Release (attaching the build wheel and source tar.gz files and auto-generating the release notes from GH API).

Checklist

If your change doesn't seem to apply, please leave them unchecked.

• I have performed a self-review of this change
• Changes have been tested
• Changes are documented

Acknowledgment

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

[bryantbiggs]

wicked smart dude - big rust person