Use trusted publishing for NuGet (#9090)

Author: tobias-tengler

.github/workflows/release.yml

@@ -6,7 +6,6 @@ on:
       - "16.*"
 
 permissions:
-  id-token: write
   contents: read
 
 jobs:
@@ -15,6 +14,7 @@ jobs:
     runs-on: ubuntu-22.04
     permissions:
       contents: write
+      id-token: write
 
     steps:
       - name: 📦 Checkout
@@ -49,11 +49,17 @@ jobs:
           NitroApiClientId: ${{ secrets.NITRO_API_CLIENT_ID }}
           NitroApiKey: ${{ secrets.NITRO_API_KEY }}
 
+      - name: NuGet login
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USERNAME }}
+
       - name: 🚀 Push Packages to NuGet
         run: |
           ./build.cmd publish --skip
         env:
-          NuGetApiKey: ${{ secrets.NUGETAPIKEY }}
+          NuGetApiKey: ${{ steps.login.outputs.NUGET_API_KEY }}
 
       - name: 📤 Attach .nupkg assets to GitHub release
         run: |