ci: use trusted publishing for release-plz

Author: robjtede

.github/workflows/release.yml

@@ -7,6 +7,7 @@ on:
 permissions:
   contents: write
   pull-requests: write
+  id-token: write
 
 jobs:
   release:
@@ -21,8 +22,12 @@ jobs:
       - name: Install Rust
         uses: actions-rust-lang/setup-rust-toolchain@v1.15.3
 
+      - name: Authenticate with crates.io
+        uses: rust-lang/crates-io-auth-action@v1.0.3
+        id: auth
+
       - name: release-plz
         uses: MarcoIeni/release-plz-action@v0.5.127
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}