Use NUGET_API_KEY (#4006)

Use the `NUGET_API_KEY` environment variable instead of specifying `--api-key`.

Author: martincostello

.github/workflows/build.yml

@@ -248,11 +248,11 @@ jobs:
 
     - name: Push NuGet packages to MyGet.org
       env:
-        API_KEY: ${{ secrets.MYGET_TOKEN }}
+        NUGET_API_KEY: ${{ secrets.MYGET_TOKEN }}
         PACKAGE_VERSION: ${{ needs.build.outputs.package-version }}
         SOURCE: "https://www.myget.org/F/domaindrivendev/api/v3/index.json"
       run: | # zizmor: ignore[use-trusted-publishing] MyGet does not support trusted publishing
-        dotnet nuget push "*.nupkg" --api-key "${API_KEY}" --skip-duplicate --source "${SOURCE}" && echo "::notice title=myget.org::Published version ${PACKAGE_VERSION} to MyGet."
+        dotnet nuget push "*.nupkg" --skip-duplicate --source "${SOURCE}" && echo "::notice title=myget.org::Published version ${PACKAGE_VERSION} to MyGet."
 
   publish-nuget:
     needs: [ build, validate-packages ]
@@ -288,11 +288,11 @@ jobs:
 
     - name: Push NuGet packages to NuGet.org
       env:
-        API_KEY: ${{ steps.nuget-login.outputs.NUGET_API_KEY }}
+        NUGET_API_KEY: ${{ steps.nuget-login.outputs.NUGET_API_KEY }}
         PACKAGE_VERSION: ${{ needs.build.outputs.package-version }}
         SOURCE: https://api.nuget.org/v3/index.json
       run: |
-        dotnet nuget push "*.nupkg" --api-key "${API_KEY}" --skip-duplicate --source "${SOURCE}" && echo "::notice title=nuget.org::Published version ${PACKAGE_VERSION} to NuGet.org."
+        dotnet nuget push "*.nupkg" --skip-duplicate --source "${SOURCE}" && echo "::notice title=nuget.org::Published version ${PACKAGE_VERSION} to NuGet.org."
 
   notify-nuget:
     needs: [ build, publish-nuget ]