Switch NuGet publishing to trusted publishing

[thomhurst]

Summary

• request GitHub OIDC tokens for NuGet trusted publishing
• use NuGet/login@v1 with ${{ secrets.NUGET_USER }} to exchange for a short-lived NuGet API key
• pass steps.login.outputs.NUGET_API_KEY into the existing publish step or pipeline input

Validation

• parsed the modified workflow YAML files locally
• ran git diff --check

Follow-up

A matching trusted publishing policy must be configured on nuget.org for this repository and workflow file before the next publish run.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 6046a5ba-907d-4815-84a4-1d750ad42d45

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}