[stesee]

Replaces the long-lived NUGET_TOKEN API key in deployRelease with NuGet Trusted Publishing. NuGet/login@v1 exchanges the GitHub OIDC token for a short-lived API key. The last release run failed because the stored key had expired.

Changes:

• deployRelease gets id-token: write for OIDC and contents: write for gh release create.
• A new NuGet/login@v1 step reads the nuget.org profile name from the NUGET_USER secret.
• dotnet nuget push now uses the temporary key from the login step.

Setup needed before merging:

1. On nuget.org, add a Trusted Publishing policy: owner Codeuctivity, repository OpenXmlPowerTools, workflow file dotnet.yml.
2. Add a repository secret NUGET_USER that holds the nuget.org profile name (not the email address).

deployTest, which pushes to nugettest.org, still uses NUGET_TEST_TOKEN and is unchanged.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.