Use correct token publishing workflow for poetry

See discussion at python-poetry/poetry#7940 (comment)

.github/workflows/publish.yml

@@ -10,17 +10,27 @@ jobs:
     runs-on: ubuntu-latest
     environment: pypi
     permissions:
+      contents: read
       id-token: write
     steps:
     - uses: actions/checkout@v2
+
     - name: Set up Python
       uses: actions/setup-python@v2
       with:
         python-version: '3.10'
+
     - name: Install dependencies
       run: |
         pip install poetry
-    - name: Build and publish
+
+    - name: Build
+      run: poetry build
+
+    - name: Mint pypi publisher token
+      id: pypi-token
+      uses: tsch/[email protected]
+
+    - name: Publish
       run: |
-        poetry build
-        poetry publish
+        poetry publish -u __token__ -p '${{ steps.pypi-token.outputs.api-token }}'