fix: switch from OIDC to API key for NuGet publishing

NuGet Trusted Publishing requires different setup than attempted.
Switched to traditional API key approach for reliability.

Requires NUGET_API_KEY secret to be configured in GitHub repo settings.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: ANcpLua

.github/workflows/nuget-publish.yml

@@ -45,11 +45,7 @@ jobs:
       - name: Publish packages to NuGet.org
         if: github.event_name == 'release' || github.event_name == 'workflow_dispatch'
         run: |
-          # Request OIDC token for NuGet Trusted Publishing
-          OIDC_TOKEN=$(curl -sS -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL" | jq -r '.value')
-
-          # Push package with OIDC token
           dotnet nuget push ./nupkg/*.nupkg \
             --source https://api.nuget.org/v3/index.json \
-            --api-key "$OIDC_TOKEN" \
+            --api-key ${{ secrets.NUGET_API_KEY }} \
             --skip-duplicate