feat: use Trusted Publisher Management instead of API Token

.github/workflows/publish.yml

@@ -1,4 +1,4 @@
-name: CI
+name: Publish to PyPI
 
 on:
   push:
@@ -18,6 +18,11 @@ jobs:
   publish-pypi:
     name: Publish to PyPI
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/pdfuck
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -26,6 +31,3 @@ jobs:
       - run: uv build
       - name: Publish a Python distribution to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}

README.md

@@ -16,6 +16,18 @@ Before installing, please ensure that you have installed Python (>=3.8) and its
 pip install pdfuck
 ```
 
+Or use [uv](https://docs.astral.sh/uv/) to run directly without installing:
+
+```bash
+uvx pdfuck
+```
+
+Note: If you use this method, subsequent usage will require adding `uvx` before the command. You can also set an alias for easier use:
+
+```bash
+alias pdfuck='uvx pdfuck'
+```
+
 ## Usage
 
 ### Remove PDF password

README_zh.md

@@ -16,6 +16,17 @@
 pip install pdfuck
 ```
 
+或使用 [uv](https://docs.astral.sh/uv/) 直接运行，无需安装：
+
+```bash
+uvx pdfuck
+```
+
+注意：如果您使用此方法，那么后续的用法都需要在命令前添加 `uvx`，您也可以设置别名以更方便地使用：
+```bash
+alias pdfuck='uvx pdfuck'
+```
+
 ## 使用
 
 ### 去除 PDF 密码