fix(ci): revert to single publish job with id-token: write

OIDC works in called workflows when both sides declare id-token: write.
The separate get-nuget-token job approach had key transport issues.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: ncipollina

.github/workflows/publish-preview.yaml

@@ -12,24 +12,10 @@ on:
 permissions:
   contents: write
   pull-requests: write
+  id-token: write
 
 jobs:
-  get-nuget-token:
-    runs-on: ubuntu-latest
-    permissions:
-      id-token: write
-      contents: read
-    outputs:
-      nuget_api_key: ${{ steps.login.outputs.NUGET_API_KEY }}
-    steps:
-      - name: NuGet Login (OIDC)
-        uses: NuGet/login@v1
-        id: login
-        with:
-          user: ${{ secrets.NUGET_USER }}
-
   publish:
-    needs: get-nuget-token
     uses: LayeredCraft/devops-templates/.github/workflows/publish-preview.yml@ci/github-nuget-oidc-login
     with:
       solution: LayeredCraft.Logging.CompactJsonFormatter.slnx
@@ -39,4 +25,4 @@ jobs:
         10.0.x
         11.0.x
       hasTests: true
-      nuget_api_key: ${{ needs.get-nuget-token.outputs.nuget_api_key }}
+    secrets: inherit