ci: use NuGet trusted publishing (OIDC) instead of a stored API key

Author: IPDataInfo

.github/workflows/publish.yml

@@ -3,6 +3,9 @@ on:
   push:
     tags: ['v*']
   workflow_dispatch:
+permissions:
+  id-token: write
+  contents: read
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -11,8 +14,13 @@ jobs:
       - uses: actions/setup-dotnet@v4
         with:
           dotnet-version: '8.0.x'
+      - name: NuGet trusted publishing login (OIDC)
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: AZcom
       - run: dotnet restore
       - run: dotnet build -c Release --no-restore
       - run: dotnet pack src/IPDataInfo.Sdk/IPDataInfo.Sdk.csproj -c Release --no-build -o out
       - name: Push to NuGet
-        run: dotnet nuget push "out/*.nupkg" --api-key "${{ secrets.NUGET_API_KEY }}" --source https://api.nuget.org/v3/index.json --skip-duplicate
+        run: dotnet nuget push "out/*.nupkg" --api-key "${{ steps.login.outputs.NUGET_API_KEY }}" --source https://api.nuget.org/v3/index.json --skip-duplicate