ci: pass secrets to reusable CI workflow in publish pipeline

The Codecov upload fails on tag-triggered runs because secrets are not
automatically inherited by reusable workflows called via workflow_call.
Add `secrets: inherit` so CODECOV_TOKEN is available during coverage upload.

Author: KingaMas

.github/workflows/publish-to-pypi.yml

@@ -9,6 +9,7 @@ on:
 jobs:
   test:
     uses: ./.github/workflows/ci.yml
+    secrets: inherit
 
   build:
     needs: test