chore: apply Trusted Publisher

.github/workflows/publish.yaml

@@ -8,6 +8,9 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     name: "Publish library"
+    environment: publish
+    permissions: 
+      id-token: write
 
     steps:
       - name: Check out
@@ -26,7 +29,6 @@ jobs:
           sed -i'' -E "s/version = \"0.0.0\"/version = \"$VERSION\"/g" pyproject.toml
           uvx --from build pyproject-build --installer uv
 
-      - name: Release to PyPI
-        run: |
-          uvx twine upload dist/* --non-interactive \
-          --username __token__ --password ${{ secrets.PYPI_API_TOKEN }}
+      - name: Publish package distributions to PyPI
+        id: publish-pypi
+        uses: pypa/gh-action-pypi-publish@release/v1