give permission for trusted publisher

Signed-off-by: Sylvain Hellegouarch <sh@defuze.org>

Author: Lawouach

.github/workflows/release.yaml

@@ -9,6 +9,9 @@ on:
 jobs:
   release-to-pypi:
     runs-on: ubuntu-22.04
+    environment: release
+    permissions:
+      id-token: write
     steps:
     - uses: actions/checkout@v4
     - name: Set up PDM