fix: update readme to test trusted publisher release flow