Ajusta workflow para separar build e empacotamento NuGet (#54)

* Ajusta workflow para separar build e empacotamento NuGet

* Ajusta workflow para Trusted Publishing no NuGet.org

Author: liphvf

.github/workflows/publish.yml

@@ -11,7 +11,8 @@ jobs:
     permissions:
       contents: write
       packages: write
-    
+      id-token: write  # required for OIDC token issuance (Trusted Publishing)
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -26,8 +27,11 @@ jobs:
       - name: Restore dependencies
         run: dotnet restore
 
-      - name: Build and create NuGet package
-        run: dotnet pack DevMaid.CLI/DevMaid.CLI.csproj -c Release --no-restore
+      - name: Build
+        run: dotnet build DevMaid.CLI/DevMaid.CLI.csproj -c Release --no-restore
+
+      - name: Create NuGet package
+        run: dotnet pack DevMaid.CLI/DevMaid.CLI.csproj -c Release --no-build --no-restore
 
       - name: Extract version
         id: version
@@ -37,10 +41,14 @@ jobs:
           echo "version=$version" >> $env:GITHUB_OUTPUT
         shell: pwsh
 
+      - name: NuGet login (Trusted Publishing)
+        uses: NuGet/login@v1
+        id: nuget-login
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: Publish to NuGet.org
-        run: dotnet nuget push DevMaid.CLI/bin/Release/*.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ secrets.NUGET_API_KEY }}
-        env:
-          NUGET_AUTH_TOKEN: ${{ secrets.NUGET_API_KEY }}
+        run: dotnet nuget push DevMaid.CLI/bin/Release/*.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ steps.nuget-login.outputs.NUGET_API_KEY }}
 
       - name: Create GitHub Release
         if: github.event_name == 'workflow_dispatch'