ci: fix publish pipeline - pin a proper version

Author: dgniewek

.github/workflows/publish.yml

@@ -62,8 +62,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Publish distribution to PyPI  # official action from python maintainers
-        uses: pypa/gh-action-pypi-publish@master
+        uses: pypa/gh-action-pypi-publish@v1.13.0
         with:
-          user: __token__
           password: ${{ secrets.PYPI_PASSWORD }}
           verbose: true  # trace if the upload fails