fix: 改用手动导入 GPG 密钥避免 settings-security 错误

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ZKGameDev

.github/workflows/publish-central.yml

@@ -40,13 +40,20 @@ jobs:
           server-id: central
           server-username: MAVEN_USERNAME
           server-password: MAVEN_PASSWORD
-          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+
+      - name: Import GPG key
+        run: |
+          install -m 700 -d ~/.gnupg
+          printf '%s\n' "$GPG_PRIVATE_KEY" | gpg --batch --import --yes --no-tty
+          gpg --list-secret-keys --keyid-format long
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
 
       - name: Set project version
         run: mvn --batch-mode versions:set -DnewVersion="$VERSION" -DgenerateBackupPoms=false
 
       - name: Publish to Maven Central
-        run: mvn --batch-mode clean deploy -Prelease -DskipTests
+        run: mvn --batch-mode clean deploy -Prelease -DskipTests -Dgpg.passphrase=
         env:
           MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
           MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}