Fix NuGet trusted publishing identity

[shps951023]

Summary

• use the NuGet trusted-publishing policy creator ITWeiHan for OIDC token exchange
• keep the policy owner, workflow, environment, and package unchanged

Evidence

The first release run reached the publish job after all eight RID consumer tests passed. NuGet/login@v1 returned HTTP 401 and explicitly required the policy creator instead of the policy owner.

[coderabbitai]

Warning

Review limit reached

Next included review available in 47 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

This review ran on the open-source allowance, not this organization's plan, because the pull request author doesn't have an assigned seat. Waiting won't change this — ask an organization admin to assign them a seat, or add seats in Billing if every seat is already assigned, then retry.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: 244dc9ed-e5a5-4830-aafa-b71c89346b55

📥 Commits

Reviewing files that changed from the base of the PR and between 2489686 and 9d38f56.

📒 Files selected for processing (1)

• .github/workflows/release.yml

---

_{Comment @coderabbitai help to get the list of available commands.}