Add permissions and use OIDC for PyPI publishing

Co-authored-by: artyom.zemlyak <artyom.zemlyak@gmail.com>

Author: cursoragent

.github/workflows/publish-to-pypi.yml

@@ -13,6 +13,9 @@ jobs:
     name: Build and publish package to PyPI
     runs-on: ubuntu-latest
 
+    permissions:
+      id-token: write
+    
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -48,5 +51,4 @@ jobs:
       - name: Publish package to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
           verbose: true