Rename deploy.yml to publish.yml, use production environment, OIDC trusted publishing

- Rename workflow file to publish.yml (matches trusted publisher config)
- Rename workflow to Publish (PyPI matches on workflow filename)
- Switch environment: pypi -> production (matches trusted publisher config)
- Use twine --trusted-publishing=always instead of API token

Author: MichaelGHSeg

.github/workflows/deploy.yml .github/workflows/publish.yml.github/workflows/deploy.yml renamed to .github/workflows/publish.yml

@@ -1,4 +1,4 @@
-name: Deploy
+name: Publish
 
 on:
   release:
@@ -36,7 +36,7 @@ jobs:
     needs: [test]
     runs-on: ${{ github.repository_owner == 'twilio' && 'ubuntu-x64' || 'ubuntu-latest' }}
     if: github.repository_owner == 'twilio'
-    environment: pypi
+    environment: production
     permissions:
       contents: read
       id-token: write
@@ -73,8 +73,5 @@ jobs:
 
       - name: Publish to PyPI
         run: |
-          pip install twine
-          twine upload --repository pypi dist/*
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+          pip install "twine>=5.0"
+          twine upload --repository pypi --trusted-publishing=always dist/*