[lawrennd]

Summary

• Correct CIP-0008: GPy already publishes via twine 6.1 OIDC (id-token: write). The TWINE_* lines left in d6bbf9f; v1.15.0 already minted a PyPI token that way (Discussion #1228).
• Keep twine upload. Switching to pypa/gh-action-pypi-publish is optional and only needed if we want PEP 740 attestations.
• Remaining CIP-0008 work: attach the unused release environment to the deploy job, then name that environment on the PyPI trusted publisher (workflow first).

Test plan

• Docs-only change to cip/cip0008.md
• No workflow change in this PR
• CIP status stays In Progress

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 55.13%. Comparing base (488cb25) to head (eefe996).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1258   +/-   ##
=======================================
  Coverage   55.13%   55.13%           
=======================================
  Files         213      213           
  Lines       22580    22580           
  Branches     2666     2666           
=======================================
  Hits        12449    12449           
  Misses       9548     9548           
  Partials      583      583           

Flag	Coverage Δ
unittests	55.13% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.