try azure federated identity with actions env

.github/workflows/cicd.yml

@@ -14,6 +14,8 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    environment:
+      name: xdlake
     strategy:
       fail-fast: false
       matrix:
@@ -53,6 +55,8 @@ jobs:
     runs-on: ubuntu-latest
     name: Build dist packages
     needs: test
+    environment:
+      name: xdlake
     steps:
     - uses: actions/checkout@v4
     - name: Set up Python
@@ -79,7 +83,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes
     needs: build
     environment:
-      name: pypi
+      name: xdlake
       url: https://pypi.org/p/xdlake
     permissions:
       id-token: write  # IMPORTANT: mandatory for trusted publishing