ci(crates): migrate picky-rs to trusted publishing (#441)

-   picky - https://crates.io/crates/picky
-   picky-asn1 - https://crates.io/crates/picky-asn1
-   picky-asn1-der - https://crates.io/crates/picky-asn1-der
-   picky-asn1-x509 - https://crates.io/crates/picky-asn1-x509
-   picky-krb - https://crates.io/crates/picky-krb

Author: Sylfwood

.github/workflows/release-crates.yml

@@ -68,15 +68,20 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
 
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
           fetch-depth: 512
 
+      - name: Authenticate with crates.io
+        id: auth
+        uses: rust-lang/crates-io-auth-action@v1
+
       - name: Run release-plz
         uses: Devolutions/actions-public/release-plz@v1
         with:
           command: release
-          registry-token: ${{ secrets.CRATES_IO_TOKEN }}
+          registry-token: ${{ steps.auth.outputs.token }}