Fix package upload on PyPi

[sandcha]

• Bug fix.
• Details:
  • Use PyPi token for deployment to fix HTTPError: 403 Forbidden on package upload

---

This PR needs:

• on PyPi: a PyPi token linked to this repository added to a PyPi account having access to the OpenFisca Country-Template project (the token is on the openfisca-bot account; we can find it on the settings page)
• on GitHub: aPYPI_TOKEN_OPENFISCA_BOT in this repository secrets

The token and the secret already existed on PyPi and GitHub.
The syntax has already been tested on other openfisca repositories (like openfisca-survey-manager).

---

These changes:

• Change non-functional parts of this repository (for instance editing the README)

[sandcha]

In the context of 2FA Requirement for PyPI beginning 2024-01-01, this PR fixes this CI deploy job:

[MattiSG]

Thanks @sandcha! I'm surprised that the PYPI_TOKEN_OPENFISCA_BOT secret is at repo level and not at organisation level. Unless it differs for each repository (which would be a good security practice), I'd find it more efficient to have it defined at org level 🙂 That's not blocking of course. The CHANGELOG is.

[MattiSG]

Missing a version number, or should be integrated in the 7.0.0 release (preferred, since 7.0.0 was not released anyway).

I'm personally in favour of simply dropping that change altogether from the changelog, as it does not impact reusers.

[sandcha]

Oh, the ## was here to say that we could expect a minor bump and then, I was waiting for the review to write the final version number.

[MattiSG]

Sorry, didn't get that!

[MattiSG]

Good catch on the version number indent!

[sandcha]

Thanks @sandcha! I'm surprised that the PYPI_TOKEN_OPENFISCA_BOT secret is at repo level and not at organisation level. Unless it differs for each repository (which would be a good security practice), I'd find it more efficient to have it defined at org level 🙂 That's not blocking of course. The CHANGELOG is.

Yes, here the PYPI_TOKEN_OPENFISCA_BOT differs for each repository. 😅

I had hoped for a token per country or for the common/international repositories but it's note possible to group repositories on the PyPi website.

So, for now, a GitHub repository has its own PYPI_TOKEN_OPENFISCA_BOT (the same variable name is used for each repository) while on the PyPi interface, a specific token is given to each repository (and the name of the token contains the name of the repository).