Update NuGet push process with OIDC login

Author: seguins

.github/workflows/dotnetcore.yml

@@ -64,9 +64,14 @@ jobs:
     - name: Pack MerQure.Tools
       run: dotnet pack src\MerQure.Tools\MerQure.Tools.csproj --configuration Release -o artifacts -p:PackageVersion=${{ steps.gitversion.outputs.nuGetVersionV2 }}
 
-    - name: Nuget org push
-      if: startsWith(github.ref, 'refs/tags/')
-      run: dotnet nuget push "artifacts/**/*.nupkg" --skip-duplicate --source https://api.nuget.org/v3/index.json -k ${{ secrets.GLOBAL_NUGET_PUBLISH }}
-      env:
-        NUGET_PUBLISH: ${{ secrets.NUGET_PUBLISH }}
+    # https://learn.microsoft.com/fr-fr/nuget/nuget-org/trusted-publishing
+    - name: NuGet login (OIDC → temp API key)
+      uses: NuGet/login@v1
+      id: login
+      with:
+        user: ${{ secrets.NUGET_USER }}
+    
+    # Push the package
+    - name: NuGet push
+      run: dotnet nuget push "artifacts/**/*.nupkg" --skip-duplicate --source https://api.nuget.org/v3/index.json --api-key ${{steps.login.outputs.NUGET_API_KEY}}