prefer trusted publishing for authentication

[korniltsev]

info[use-trusted-publishing]: prefer trusted publishing for authentication
   --> ./.github/workflows/publish.yml:109:9
    |
109 |         uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
    |         -------------------------------------------------------------------------- info: this step
110 |         with:
111 |           user: __token__
112 |           password: ${{ secrets.PYPI_API_TOKEN }}
    |           --------------------------------------- info: uses a manually-configured credential instead of Trusted Publishing
    |
    = note: audit confidence → High

#219