fix: publish package using trusted publisher workflow

.github/workflows/python-publish.yml

@@ -1,5 +1,7 @@
 # This workflows will upload a Python Package using Twine when a release is created
 # For more information see: https://help.github.com/en/actions/language-and-framework-guides/using-python-with-github-actions#publishing-to-package-registries
+# On using trusted publishers:
+# https://docs.pypi.org/trusted-publishers/using-a-publisher/
 
 name: Upload Python Package
 
@@ -9,7 +11,9 @@ on:
 
 jobs:
   deploy:
-
+    environment: release
+      permissions:
+      id-token: write
     runs-on: ubuntu-latest
 
     steps: