Fix missing permissions on attestation publishing in CI (#765)

* Fix missing permissions
* Fix yamllint error

---------

Signed-off-by: Matt Norton <matt@carrotmanmatt.com>

Author: CarrotManMatt

.github/workflows/check-build-deploy.yaml

@@ -239,6 +239,7 @@ jobs:
             == 'CSSUoB/TeX-Bot-Py-V2'
         needs: [mypy, pre-commit, pymarkdown, pytest, ruff-lint, uv-check]
         permissions:
+            artifact-metadata: write
             attestations: write
             id-token: write
             packages: write