Add PyPI deployment environment [ci]

[cdce8p]

Description

Add an environment for the release workflow. This will allow for additional protection rules and better secrets scoping.
https://docs.github.com/en/actions/deployment/targeting-different-environments/using-environments-for-deployment

Note
It would make sense to move the PYPI_API_TOKEN secret. That way other workflows won't be able to access it.

--

I've also added a wildcard tag protection rule. Thus only users with the admin or maintain permission will be able to create new tags.
https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/configuring-tag-protection-rules

[coveralls]

Pull Request Test Coverage Report for Build 3327840878

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 92.272%

---

Totals
Change from base Build 3323538272:	0.0%
Covered Lines:	9862
Relevant Lines:	10688

---

💛 - Coveralls

[Pierre-Sassoulas]

These permission changes are most welcome!