ci(nuget): publish via composite action for trusted publishing

NuGet Trusted Publishing does not support reusable workflows. Run the
publish step as a composite action inside this workflow.

Author: samtrion

.github/workflows/publish-nuget.yml

@@ -19,10 +19,30 @@ jobs:
   nuget:
     name: Publish
     if: ${{ github.event.workflow_run.conclusion == 'success' && github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]' }}
-    uses: dailydevops/pipelines/.github/workflows/publish-nuget.yml@b5bbe255ea3e1ffb252634113c5af4dad782aabf # 2.7.0
+    runs-on: ubuntu-latest
+    environment: NuGet
+    permissions:
+      actions: read
+      contents: read
+      id-token: write
+    steps:
+      - uses: dailydevops/pipelines/.github/actions/nuget-publish@b5bbe255ea3e1ffb252634113c5af4dad782aabf # main (#1099)
+        with:
+          nuget-user: ${{ secrets.NUGET_USER }}
+          github-token: ${{ secrets.WORKFLOW_PACKAGES }}
+          run-id: ${{ github.event.workflow_run.id }}
+          artifact-pattern: release-packages-*
+
+  version:
+    name: Version Management
+    if: ${{ github.event.workflow_run.conclusion == 'success' && github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]' }}
+    uses: dailydevops/pipelines/.github/workflows/step-dotnet-version.yml@b5bbe255ea3e1ffb252634113c5af4dad782aabf # main (#1099)
+    secrets: inherit
+
+  release:
+    name: Create Release
+    needs: [nuget, version]
+    uses: dailydevops/pipelines/.github/workflows/step-dotnet-draft-release.yml@b5bbe255ea3e1ffb252634113c5af4dad782aabf # main (#1099)
     with:
-      workflowName: ${{ github.event.workflow_run.name }}
-      artifactPattern: release-packages-*
-      environment: NuGet
-      runId: ${{ github.event.workflow_run.id }}
+      solution-version: ${{ needs.version.outputs.solution-version }}
     secrets: inherit