ci: add permission specifications

Author: ChrisUser

.github/workflows/main.yml

@@ -34,6 +34,9 @@ jobs:
   tag-and-npm-publish:
     if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     needs: [build-and-test]
     steps:
       - name: Check out repository code