fix (cd): added write permissions inside release tag workflow

Signed-off-by: rafaeljohn9 <rafaeljohb@gmail.com>

Author: RafaelJohn9

.github/workflows/publish-pypi.yml

@@ -4,9 +4,6 @@ on:
   workflow_call:
   workflow_dispatch:
 
-permissions:
-  id-token: write  # for trusted publishing
-
 jobs:
   publish:
     runs-on: ubuntu-latest

.github/workflows/release-tag.yml

@@ -5,13 +5,16 @@ on:
     tags: ["v*.*.*"]
   workflow_dispatch:
 
+permissions:
+  id-token: write
+
 jobs:
   build:
     uses: ./.github/workflows/build-binaries.yml
 
-  publish-cargo:
-    uses: ./.github/workflows/publish-cargo.yml
-
   publish-pypi:
     uses: ./.github/workflows/publish-pypi.yml
     needs: build  # ← Can run after build, even in parallel with cargo
+
+  publish-cargo:
+    uses: ./.github/workflows/publish-cargo.yml