chore: remove publish secret token

Author: abelaba

.github/workflows/publish-to-pypi.yml

@@ -7,6 +7,9 @@ jobs:
   build-n-publish:
     name: Build and publish optimagic Python 🐍 distributions 📦 to PyPI
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4.3.1
         with:
@@ -31,5 +34,3 @@ jobs:
       - name: Publish distribution 📦 to PyPI
         if: startsWith(github.ref, 'refs/tags')
         uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN_OPTIMAGIC }}