fix: pass through secret correctly by name

.github/workflows/publish.yaml

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 23f9bfa..eb85888 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -31,4 +31,4 @@
             id-token: write
         secrets:
             # Necessary to push to the BCR fork, and to open a pull request against a registry
-            publish_token: ${{ secrets.BCR_PUBLISH_TOKEN }}
+            BCR_PUBLISH_TOKEN: ${{ secrets.BCR_PUBLISH_TOKEN }}