chore: add support for oidc in all release workflows

[remyleone]

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for pull request followers and do not help prioritize the request

Relates OR Closes #0000

Release note for CHANGELOG:

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.14%. Comparing base (35c1267) to head (ecdcae3).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5576   +/-   ##
=======================================
  Coverage   51.14%   51.14%           
=======================================
  Files         339      339           
  Lines       77213    77213           
=======================================
  Hits        39490    39490           
  Misses      36232    36232           
  Partials     1491     1491           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds OIDC token permissions to the release workflow so jobs can authenticate via GitHub OIDC during releases.

Changes:

• Grants id-token: write at the workflow level to enable OIDC.
• Removes the wasm job’s explicit permissions block (now inherits workflow permissions).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.