switch to trusted publishing in workflows

Author: vgnshiyer

.github/workflows/publish.yml

@@ -8,6 +8,13 @@ on:
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/apple-books-mcp/
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -32,8 +39,6 @@ jobs:
           uv run python -m build
 
       - name: Publish package
-        run: |
-          uv run twine upload dist/*
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true