Authenticate PyPI uploads with API tokens

[gomezzz]

Description

The 0.2.1 testpypi upload built and transferred the 16.1 MB wheel fine, then died on HTTPError: 403 Forbidden from https://test.pypi.org/legacy/.

Cause: both deploy workflows authenticate with TWINE_USERNAME/TWINE_PASSWORD set from the PYPI_USERNAME / PYPI_PASSWORD secrets. PyPI and Test PyPI have since removed password-based uploads entirely — API tokens are the only accepted credential. The 403 is the server rejecting the scheme, not the package.

This switches both workflows to the supported form (the same one torchquad uses): the literal user __token__ with an API token as the password. Test PyPI and PyPI are separate services with separate accounts, so they get separate token secrets instead of the single shared pair.

• deploy_to_test_pypi.yml -> secrets.TEST_PYPI_TOKEN
• deploy_to_pypi.yml -> secrets.PYPI_TOKEN

Related to #224

Important

This needs two new repository secrets before either workflow can upload:

Secret	Created at	Scope
TEST_PYPI_TOKEN	https://test.pypi.org/manage/account/token/	project paseos (or account-wide for the first upload)
PYPI_TOKEN	https://pypi.org/manage/account/token/	project paseos

Paste the token including its pypi- prefix. The old PYPI_USERNAME / PYPI_PASSWORD secrets are unused after this and can be deleted.

Test plan

• Add TEST_PYPI_TOKEN and PYPI_TOKEN repository secrets
• Run Upload Python Package to testpypi on release and confirm it uploads paseos 0.2.1
• pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple paseos

[github-actions]

Coverage Report

File	Stmts	Miss	Cover	Missing
__init__.py	33	1	97%	48
paseos.py	147	12	92%	67–68, 153–154, 214, 229, 247, 256, 274, 305, 313, 316
activities
activity_manager.py	43	3	93%	46, 74, 156
activity_processor.py	59	1	98%	91
activity_runner.py	62	10	84%	80–81, 84, 104, 108–109, 112–113, 122, 125
actors
actor_builder.py	185	32	83%	24–25, 27, 30, 33, 223–225, 256–258, 312, 316–317, 320–321, 342, 344–345, 348–349, 488, 545, 573, 585–586, 588–589, 596–597, 604–605
base_actor.py	128	18	86%	82, 104, 120, 167, 207–209, 230, 239, 256, 277, 283–286, 292, 307, 362
ground_station_actor.py	15	3	80%	47, 51, 53
spacecraft_actor.py	60	1	98%	122
central_body
central_body.py	65	5	92%	68, 177–178, 186–187
is_in_line_of_sight.py	58	12	79%	107–108, 110, 112–117, 124, 168, 188
mesh_between_points.py	35	2	94%	64, 72
sphere_between_points.py	26	8	69%	35, 37–38, 48, 50–51, 63–64
communication
find_next_window.py	20	0	100%
get_communication_window.py	23	2	91%	38, 64
geometric_model
geometric_model.py	28	16	43%	32, 34–38, 47, 49, 61, 76, 78–79, 92–93, 101–102
power
charge_model.py	16	1	94%	50
discharge_model.py	7	1	86%	34
power_device_type.py	4	0	100%
radiation
radiation_model.py	32	0	100%
tests
activity_test.py	56	3	95%	92, 95–96
actor_builder_test.py	63	0	100%
advance_time_test.py	17	0	100%
communication_window_test.py	48	1	98%	177
custom_propagator_test.py	25	0	100%
custom_property_test.py	23	0	100%
default_cfg_test.py	9	0	100%
eclipse_test.py	10	1	90%	20
event_based_test.py	23	0	100%
import_test.py	6	1	83%	13
init_test.py	8	1	88%	16
line_of_sight_test.py	62	4	94%	143–146
mesh_test.py	119	3	97%	119, 137, 145
multiple_instance_test.py	12	0	100%
operations_monitor_test.py	31	0	100%
power_test.py	29	0	100%
radiation_test.py	59	0	100%
test_utils.py	17	0	100%
thermal_model_test.py	30	1	97%	70
time_multiplier_test.py	26	0	100%
visualization_test.py	18	1	94%	30
thermal
thermal_model.py	75	0	100%
utils
check_cfg.py	61	18	70%	31, 40, 46, 60–62, 67, 70–72, 75–77, 80–82, 98, 103
load_default_cfg.py	9	0	100%
operations_monitor.py	71	3	96%	127–128, 130
reference_frame.py	4	0	100%
set_log_level.py	6	0	100%
visualization
animation.py	18	6	67%	28–31, 36, 45
plot.py	9	3	67%	29–30, 32
space_animation.py	215	23	89%	109–110, 125, 148–149, 183, 207, 214, 220, 330, 353–355, 360, 369–370, 374, 410, 416–417, 448, 462, 473
TOTAL	2205	197	91%

Tests	Skipped	Failures	Errors	Time
38	0 💤	0 ❌	0 🔥	3m 54s ⏱️