chore: restrict publish to environment (open-feature#431)

Restricts usage of the `NUGET_TOKEN` to only the `publish` environment.

Signed-off-by: Todd Baert <[email protected]>

Author: toddbaert

.github/workflows/release.yml

@@ -29,6 +29,7 @@ jobs:
       release_tag_name: ${{ steps.release.outputs.tag_name }}
 
   release:
+    environment: publish
     runs-on: ubuntu-latest
     needs: release-please
     permissions: