fix: disable trusted publishing, use API token

Author: hidai25

.github/workflows/publish.yml

@@ -9,7 +9,6 @@ jobs:
     name: Build and Publish to PyPI
     runs-on: ubuntu-latest
     permissions:
-      id-token: write
       contents: read
 
     steps: