[SCSB-274] localize build workflow for trusted publishers

[zacharyburnett]

Resolves SCSB-274

• localizes build workflow so we can set up Trusted Publishers (eventually) and not need a PyPI token
• avoids Python 3.12 pipx issue with upstream OpenAstronomy build workflow
• applies upcoming package template

Tasks

• update or add relevant tests
• update relevant docstrings and / or docs/ page
• Does this PR change any API used downstream? (if not, label with no-changelog-entry-needed)
  • write news fragment(s) in changes/: echo "changed something" > changes/<PR#>.<changetype>.rst (see changelog readme for instructions)
  • run regression tests with this branch installed (stpipe@git+https://github.com/<fork>/stpipe.git@<branch>)
    • jwst regression test
    • romancal regression test

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.85%. Comparing base (0d5498d) to head (2a074ae).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #351   +/-   ##
=======================================
  Coverage   91.85%   91.85%           
=======================================
  Files          39       39           
  Lines        3770     3770           
=======================================
  Hits         3463     3463           
  Misses        307      307           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.