ci: grant id-token write permission for AWS OIDC

The Build and Release workflow's Configure AWS Credentials step assumes a
role via OIDC (role-to-assume with no static keys), which requires the
id-token: write permission. The workflow only granted contents: read, so
the step would fail to obtain a web identity token.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: cybercyst

.github/workflows/build-and-release.yaml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   build-and-push: