fix: pass PYPI_TOKEN secret to publish step (#108)

The publish script checks for PYPI_TOKEN env var but the workflow
never passed it, falling back to trusted publishing which isn't
configured. This caused the 0.34.0 release to fail to publish.

Author: icubert

.github/workflows/publish-pypi.yml

@@ -30,3 +30,5 @@ jobs:
       - name: Publish to PyPI
         run: |
           bash ./bin/publish-pypi
+        env:
+          PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}