fix: drop hash-pinned publish.txt — twine has Linux-only transitive deps

keyring (twine dep) pulls in SecretStorage on Linux which can't be
resolved from macOS. Pin twine version directly instead.

Author: ranaroussi

.github/workflows/rc.yml

@@ -54,5 +54,5 @@ jobs:
       - name: Verify distributions
         run: |
           ls -la dist/
-          python -m pip install --require-hashes -r requirements/publish.txt
+          pip install twine==6.2.0
           twine check dist/*