ci release: add support for trusted publisher

.github/workflows/release.yml

@@ -28,3 +28,23 @@ jobs:
             --title "${title}"
         env:
           GH_TOKEN: ${{ github.token }}
+
+  rubygems:
+    name: RubyGems
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      id-token: write
+    environment: release
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ruby
+      - name: Build gems
+        run: |
+          rake build
+      - uses: rubygems/[email protected]
+      - name: Push gems
+        run: |
+          rake release:rubygem_push