fix trusted publisher

Author: hobu

.github/workflows/release.yml

@@ -23,6 +23,14 @@ jobs:
   build_sdist:
     name: Build source distribution
     runs-on: ubuntu-latest
+    environment:
+      name: release
+      url: https://pypi.org/p/pdal-plugins
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+    strategy:
+      fail-fast: true
+
     steps:
     - uses: actions/checkout@v4