ci: add id-token write permission for provenance

Provenance generation in GitHub Actions requires `write` access to the
`id-token` permission.

Author: BurningEnlightenment

.github/workflows/publish.yml

@@ -28,6 +28,8 @@ jobs:
   publish-npm:
     name: Publish the package to the npm registry
     environment: publish
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     needs: [build-package]
     steps: