Change github release job in CI (#161)

.github/workflows/CI-python.yml

@@ -11,9 +11,6 @@ on:
       - released
       - prereleased
 
-permissions:
-  contents: write
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name }}-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: true
@@ -389,9 +386,18 @@ jobs:
         skip-existing: true
         packages-dir: artifacts-${{ matrix.package }}/
 
+  gh-publish:
+    name: Publish artifacts to GH
+    if: startsWith(github.ref, 'refs/tags/')
+    permissions:
+      contents: write
+    needs: [build-test, build-sdist]
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/download-artifact@v3
+      with:
+        name: dist
     - name: Upload to GitHub
       uses: softprops/action-gh-release@v2
       with:
-        files: artifacts-${{ matrix.package }}/*
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        files: dist/*