Use twine instead of setup.py upload

More secure, and lets us avoid building the package twice