fix: remove publish step from auto-release, let publish.yml handle it

auto-release.yml was trying to publish via OIDC but wasn't registered
on PyPI. The existing publish.yml (triggered on v* tags) is already
registered — so auto-release now only bumps version and pushes the tag.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: pmarmaroli

.github/workflows/auto-release.yml

@@ -10,10 +10,8 @@ jobs:
   release:
     if: "!startsWith(github.event.head_commit.message, 'chore: bump version')"
     runs-on: ubuntu-latest
-    environment: pypi
     permissions:
       contents: write   # push version-bump commit + tag back to master
-      id-token: write   # OIDC trusted publishing to PyPI (no token needed)
 
     steps:
       - uses: actions/checkout@v4
@@ -43,18 +41,6 @@ jobs:
           print(f"Bumped to {new_ver}")
           PYEOF
 
-      - name: Install build tools
-        run: pip install hatchling build
-
-      - name: Build
-        run: python -m build
-
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        # Uses OIDC trusted publishing — no API token required.
-        # Ensure this repo + workflow is registered at:
-        # https://pypi.org/manage/project/vocametrix/settings/publishing/
-
       - name: Commit version bump and push tag
         run: |
           git config user.name "github-actions[bot]"