Update pypi workflow using OIDC

.github/workflows/pypi.yml

@@ -8,6 +8,9 @@ on:
 jobs:
   pypi:
     runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -17,14 +20,11 @@ jobs:
         with:
           python-version: '3.10'
 
-      - name: Install deps
-        run: python -m pip install -U build twine
+      - name: Install `build` dependency
+        run: python -m pip install -U build
 
-      - name: Build `dist/`
+      - name: Build dist/
         run: python -m build
 
-      - name: Upload to PyPi
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-        run: python -m twine upload dist/*
+      - name: Publish package to PyPi
+        uses: pypa/gh-action-pypi-publish@release/v1