Uses OIDC for github action authentication. This is more secure because there is no token to accidentally leak.