switch to trusted publishing

Author: hendrikmuhs

.github/workflows/python-cibuildwheel.yml

@@ -151,6 +151,11 @@ jobs:
   upload_all:
     needs: [build_wheels, build_sdist]
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/keyvi
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v5
         with:
@@ -160,6 +165,5 @@ jobs:
 
       - uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.pypi_password }}
           verbose: true
           skip-existing: true