ci: use trusted publishing to pypi

Author: Jajcus

.github/workflows/ci.yml

@@ -264,6 +264,13 @@ jobs:
 
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
 
+    environment:
+      name: pypi
+      url: https://pypi.org/p/alsa-midi
+
+    permissions:
+      id-token: write
+
     needs:
       - build-pure
       - build-manylinux_2_12_x86_64
@@ -288,8 +295,3 @@ jobs:
 
       - name: Publish package to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
-          # password: ${{ secrets.TEST_PYPI_API_TOKEN }}
-          # repository_url: https://test.pypi.org/legacy/