chore: PyPI workflow use PYPI_API_TOKEN, license SPDX

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: uzunenes

.github/workflows/publish-pypi.yml

@@ -1,6 +1,9 @@
 # Publish visgate-sdk to PyPI on GitHub Release.
-# Uses PyPI trusted publisher (no token needed).
-# Setup: https://docs.pypi.org/trusted-publishers/adding-a-publisher/
+#
+# Authentication (in order of preference):
+#   1. PyPI trusted publisher (recommended, no secrets needed)
+#      Setup: https://docs.pypi.org/trusted-publishers/adding-a-publisher/
+#   2. PYPI_API_TOKEN secret (fallback)
 name: Publish to PyPI
 
 on:
@@ -10,8 +13,9 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    environment: pypi
     permissions:
-      id-token: write  # Required for trusted publishing
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4
@@ -29,3 +33,5 @@ jobs:
 
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}

pyproject.toml

@@ -7,14 +7,13 @@ name = "visgate-sdk"
 version = "0.2.2"
 description = "Python client for Visgate API — unified vision AI gateway (Fal, Replicate, Runway)."
 readme = "README.md"
-license = { text = "MIT" }
+license = "MIT"
 requires-python = ">=3.9"
 authors = [{ name = "uzunenes", email = "uzun.ens@gmail.com" }]
 keywords = ["visgate", "ai", "vision", "api", "fal", "replicate", "runway"]
 classifiers = [
     "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
-    "License :: OSI Approved :: MIT License",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.9",
     "Programming Language :: Python :: 3.10",