refactor publish action

.github/workflows/publish.yml

@@ -7,7 +7,11 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
-
+    environment:
+      name: pypi
+      url: https://pypi.org/p/qpay
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python
@@ -40,5 +44,8 @@ jobs:
           VERSION=${GITHUB_REF#refs/tags/v}
           poetry version $VERSION
 
-      - name: Publish package
-        run: poetry publish --build -u __token__ -p ${{ secrets.PYPI_API_TOKEN }}
+      - name: Build package
+        run: poetry build
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1