added id-token to release wf

fixes error 'Provenance generation in GitHub Actions requires "write" access to the "id-token" permission'
as per doc: https://docs.npmjs.com/generating-provenance-statements

Author: pirafrank

.github/workflows/release.yml

@@ -7,6 +7,9 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-20.04
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
       - name: Clone repo