Allow publish workflow to generate OIDC tokens

See https://docs.npmjs.com/trusted-publishers#github-actions-configuration

Author: bdukes

.github/workflows/npm-publish.yml

@@ -4,6 +4,10 @@
 		"release": { "types": ["published"] },
 		"workflow_dispatch": {}
 	},
+	"permissions": {
+		"id-token": "write",
+		"contents": "read"
+	},
 	"jobs": {
 		"build": {
 			"runs-on": "ubuntu-latest",