Use a trusted publisher for linux wheels, not just sdist

Author: polm

.github/workflows/manylinux.yml

@@ -38,6 +38,8 @@ jobs:
       uses:  pypa/gh-action-pypi-publish@release/v1
   build_manylinux:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     strategy:
       matrix:
         arch: [x86_64, aarch64]
@@ -83,13 +85,5 @@ jobs:
         path: manylinux-wheels
     - name: Publish to PyPI if tagged
       if: startsWith(github.ref, 'refs/tags')
-      env:
-        TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-        TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-      run: |
-        python --version
-        pip --version
-        python -m pip install --upgrade pip
-        pip install twine setuptools-scm
-        twine upload manylinux-wheels/mecab*whl
+      uses:  pypa/gh-action-pypi-publish@release/v1