fix: use API token for PyPI publish

Switch from trusted publishing (OIDC) to API token auth to resolve
publish failures.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: affandar

.github/workflows/publish.yml

@@ -92,3 +92,4 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           skip-existing: true
+          password: ${{ secrets.PYPI_API_TOKEN }}