Use trusted publisher on linux

Author: polm

.github/workflows/manylinux.yml

@@ -5,6 +5,8 @@ on: [push]
 jobs:
   build_sdist:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
     - uses: actions/checkout@v3
     - name: Set up Python
@@ -33,11 +35,7 @@ jobs:
         python setup.py sdist
     - name: upload to pypi if tagged
       if: startsWith(github.ref, 'refs/tags')
-      env:
-        TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-        TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-      run: |
-        twine upload dist/mecab*.tar.gz
+      uses:  pypa/gh-action-pypi-publish@release/v1
   build_manylinux:
     runs-on: ubuntu-latest
     strategy: