fix: tweak pypi publishing config

.github/workflows/ci.yml

@@ -80,6 +80,8 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')  # only publish to pypi on tag pushes
     runs-on: ubuntu-latest
 
+    # The `environment` just restricts the scope of trusted publishing. You
+    # add this to the things you trust in the pypi UI.
     environment:
       name: testpypi
 
@@ -121,6 +123,8 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')  # only publish to pypi on tag pushes
     runs-on: ubuntu-latest
 
+    # The `environment` just restricts the scope of trusted publishing. You
+    # add this to the things you trust in the pypi UI.
     environment:
       name: pypi
 
@@ -150,5 +154,4 @@ jobs:
     - name: Publish distribution 📦 to TestPyPI
       uses: pypa/gh-action-pypi-publish@release/v1
       with:
-        repository-url: https://test.pypi.org/legacy/
         verbose: true