👷 provide api key at publish step only

Author: nabeelvalley

.github/workflows/publish.yml

@@ -13,8 +13,6 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: erlef/setup-beam@v1
-        env:
-          HEXPM_API_KEY:: ${{ secrets.HEXPM_API_KEY }}
         with:
           otp-version: "26.0.2"
           gleam-version: "1.2.1"
@@ -24,3 +22,5 @@ jobs:
       - run: gleam test
       - run: gleam format --check src test
       - run: gleam publish -y
+        env:
+          HEXPM_API_KEY: ${{ secrets.HEXPM_API_KEY }}