PYTHON-5047 Fix handling of testpypi (#268)

Author: blink1073

.github/workflows/release-python.yml

@@ -159,11 +159,12 @@ jobs:
       with:
         name: all-dist-${{ github.run_id }}
         path: dist/
-    - name: Publish distribution 📦 to PyPI
-      if: startsWith(github.ref, 'refs/tags/')
-      uses: pypa/gh-action-pypi-publish@release/v1
     - name: Publish package distributions to TestPyPI
       uses: pypa/gh-action-pypi-publish@release/v1
       with:
         repository-url: https://test.pypi.org/legacy/
         skip-existing: true
+        attestations: ${{ !startsWith(github.ref, 'refs/tags/') }}
+    - name: Publish distribution 📦 to PyPI
+      if: startsWith(github.ref, 'refs/tags/')
+      uses: pypa/gh-action-pypi-publish@release/v1