Switch to trusted publishing for PyPI

- Use OIDC trusted publisher instead of API token
- Add id-token: write permission
- Remove CVXPY master install, use PyPI version

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Fix CI (#162)

* Releases 0.1.8

* Tests adding permissions

* Tweak on permissions

* Tweaks tabs

* Bumps version number

Tweaks tabs