ci: add PyPI trusted-publishing release workflow

.github/workflows/release.yml

@@ -0,0 +1,44 @@
+name: Release
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        with:
+          python-version: "3.12"
+
+      - name: Install build
+        run: python -m pip install build
+
+      - name: Build distributions
+        run: python -m build
+
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write # OIDC trusted publishing, no API tokens
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: dist
+          path: dist/
+
+      - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0

pyproject.toml

@@ -3,11 +3,26 @@ requires = ["hatchling"]
 build-backend = "hatchling.build"
 
 [project]
-name = "trace-tests"
+name = "agentrust-trace-tests"
 version = "0.1.0"
 description = "TRACE conformance test suite"
 readme = "README.md"
 license = { text = "Apache-2.0" }
+authors = [
+    { name = "agentrust.io" },
+]
+keywords = ["trace", "conformance", "attestation", "ai-agents", "provenance"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: Apache Software License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Software Development :: Testing",
+    "Topic :: Security",
+]
 requires-python = ">=3.11"
 dependencies = [
     "click>=8.1",
@@ -17,13 +32,15 @@ dependencies = [
 
 [project.urls]
 Homepage = "https://github.com/agentrust-io/trace-tests"
+Repository = "https://github.com/agentrust-io/trace-tests"
 Documentation = "https://github.com/agentrust-io/trace-tests#readme"
+"Bug Tracker" = "https://github.com/agentrust-io/trace-tests/issues"
 
 [project.scripts]
 trace-tests = "trace_tests.cli:main"
 
 [project.optional-dependencies]
-dev = ["trace-tests[test]", "ruff", "mypy", "bandit", "pip-audit"]
+dev = ["agentrust-trace-tests[test]", "ruff", "mypy", "bandit", "pip-audit"]
 test = ["pytest>=8.0", "pytest-cov"]
 
 [tool.hatch.build.targets.wheel]