ci: fix token permissions (#929)

Author: aaron-steinfeld

.github/workflows/publish.yml

@@ -5,6 +5,11 @@ on:
       - main
 jobs:
   publish:
+    permissions:
+      contents: 'write'
+      id-token: 'write'
+      issues: 'write'
+      pull-requests: 'write'
     runs-on: ubuntu-24.04
     steps:
       - name: Check out code