Fix publish workflow secret gating for dispatch/release

Author: 0x-Professor

.github/workflows/publish.yml

@@ -52,6 +52,8 @@ jobs:
     permissions:
       id-token: write
       contents: read
+    env:
+      PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
     steps:
       - name: Download dist artifacts
         uses: actions/download-artifact@v4
@@ -60,12 +62,12 @@ jobs:
           path: dist
 
       - name: Publish package to PyPI (token)
-        if: ${{ secrets.PYPI_API_TOKEN != '' }}
+        if: ${{ env.PYPI_API_TOKEN != '' }}
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
+          password: ${{ env.PYPI_API_TOKEN }}
 
       - name: Publish package to PyPI (trusted publishing)
-        if: ${{ secrets.PYPI_API_TOKEN == '' }}
+        if: ${{ env.PYPI_API_TOKEN == '' }}
         uses: pypa/gh-action-pypi-publish@release/v1