chore(ci): revert to enable trusted publishing workflow (#203)

Revert "chore(ci) : revert to previous publish workflow (#167)"

This reverts commit ec839b9.

Author: SoulPancake

.github/workflows/main.yaml

@@ -261,16 +261,26 @@ jobs:
           name: nuget-package
           path: ./dist
 
-      - name: Publish
-        run: |
-          echo "Publishing primary package (.nupkg)...";
-          dotnet nuget push dist/OpenFga.Sdk.*.nupkg --api-key ${NUGET_AUTH_TOKEN} --skip-duplicate --source https://api.nuget.org/v3/index.json
-          echo "Publishing symbol package (.snupkg)...";
-          dotnet nuget push dist/OpenFga.Sdk.*.snupkg --api-key ${NUGET_AUTH_TOKEN} --skip-duplicate --source https://api.nuget.org/v3/index.json || echo "No symbol package found or already published."
-        env:
-          NUGET_AUTH_TOKEN: ${{secrets.NUGET_AUTH_TOKEN}}
+      - name: NuGet login (OIDC)
+        uses: NuGet/login@d22cc5f58ff5b88bf9bd452535b4335137e24544 # v1.1.0
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USER }}
 
+      - name: Publish to NuGet
+        run: |
+          echo "Publishing primary package to NuGet (.nupkg)...";
+          dotnet nuget push dist/OpenFga.Sdk.*.nupkg --api-key ${{steps.login.outputs.NUGET_API_KEY}} --skip-duplicate --source https://api.nuget.org/v3/index.json
+          echo "Publishing symbol package to NuGet (.snupkg)...";
+          dotnet nuget push dist/OpenFga.Sdk.*.snupkg --api-key ${{steps.login.outputs.NUGET_API_KEY}} --skip-duplicate --source https://api.nuget.org/v3/index.json || echo "No symbol package found or already published."
 
+      - name: Publish to GitHub Package Registry
+        continue-on-error: true
+        run: |
+          echo "Publishing primary package to GitHub Package Registry (.nupkg)...";
+          dotnet nuget push dist/OpenFga.Sdk.*.nupkg --api-key ${{ secrets.GITHUB_TOKEN }} --skip-duplicate --source https://nuget.pkg.github.com/openfga/index.json
+          echo "Publishing symbol package to GitHub Package Registry (.snupkg)...";
+          dotnet nuget push dist/OpenFga.Sdk.*.snupkg --api-key ${{ secrets.GITHUB_TOKEN }} --skip-duplicate --source https://nuget.pkg.github.com/openfga/index.json || echo "No symbol package found or already published."
 
   undraft-release:
     if: startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, '-test')