ci: use correct crates-io-auth-action and release environment

- Switch to rust-lang/crates-io-auth-action@v1 per the crates.io
  trusted publishing guide
- Pass token explicitly via CARGO_REGISTRY_TOKEN output
- Add environment: release for enhanced security
- Simplify tag pattern to v*

https://claude.ai/code/session_01TCLsdwZEbxsMdnqGaG7rbp

Author: claude

.github/workflows/release.yml

@@ -1,26 +1,27 @@
-name: Release
+name: Publish to crates.io
 
 on:
   push:
-    tags:
-      - "v[0-9]+.*"
+    tags: ["v*"]
 
 permissions:
   contents: read
 
 jobs:
   publish:
     runs-on: ubuntu-latest
+    environment: release
     permissions:
       contents: read
-      id-token: write # required for OIDC trusted publishing
+      id-token: write
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@v6
 
       - uses: dtolnay/rust-toolchain@stable
 
-      - name: Obtain crates.io token via OIDC
-        uses: rust-lang/crates-io-cargo-trusted-publishing@v0
+      - uses: rust-lang/crates-io-auth-action@v1
+        id: auth
 
-      - name: Publish
-        run: cargo publish
+      - run: cargo publish
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}