add Zenodo sandbox publishing for testing

[egpbos]

Follow-up from #393:

Pushing to Zenodo in our pdf.yml workflow is currently conditional: it will not be done when the workflow is triggered manually, in that case, it only generates the PDF, for testing purposes. Instead, we could push to sandbox.zenodo.org to actually test the entire workflow.