[Shellghostt]

Refs #1 (do not close yet — the first upload is a manual, account-gated step)

What

Prepares the repo for pip install webvac:

• Metadata cleanup in pyproject.toml: SPDX license = "MIT" (replaces the deprecated TOML table), explicit license-files, classifiers, keywords, and project URLs. Build requirement raised to setuptools>=77 for PEP 639 support.
• Version single-sourcing: removed the duplicated version = "0.3.0"; the build now reads webvac.__version__ via [tool.setuptools.dynamic].
• Release workflow (.github/workflows/release.yml): on a v* tag, builds sdist + wheel, runs twine check, verifies the tag matches webvac.__version__, then publishes with pypa/gh-action-pypi-publish using Trusted Publishing (OIDC, no stored token).
• Docs: README gains a pip install webvac install path; docs/RELEASE_CHECKLIST.md gains a PyPI section; CHANGELOG.md gets an Unreleased entry.

Verification

$ python -m build
Successfully built webvac-0.3.0.tar.gz and webvac-0.3.0-py3-none-any.whl

$ python -m twine check dist/*
Checking dist/webvac-0.3.0-py3-none-any.whl: PASSED
Checking dist/webvac-0.3.0.tar.gz: PASSED

$ python -m pytest tests -q
43 passed

Wheel metadata confirms Version: 0.3.0, License-Expression: MIT, the five project URLs, Requires-Python: >=3.11, and the 3.11/3.12 classifiers.

Still required for the actual publish (user)

1. Create the webvac project on PyPI (or a pending trusted publisher) with owner Shellghostt, repo WebVac, workflow release.yml.
2. Pick the release version. v0.3.0 already exists and points at an older commit, so the tag-driven workflow needs a new tag. Either bump webvac/__init__.py (e.g. 0.3.1) and tag v0.3.1, or upload 0.3.0 manually with twine upload.
3. Push the tag. The workflow refuses to publish if the tag and package version disagree.