The following should be done as a second sweep:
- stop the flow early if version foun on pypi already (to avoid running long testing for nothing)
- Adopt the "setup uv" action everywhere in the other flows
- figure out about 'attestations' and re-enable if ok to do so (two places: in release and _test_release)
- Completely revoke, once full functionality verified with an actual release, any PyPI release key for astrapy