Add `tox.ini` config with supported versions, and a new tox CI workflow to run tox tests on master branch changes. This is "expensive" so we may consider limiting execution further.
