add permissions to publish npm packages with provenance (#124)

* add permissions to publish npm packages with provenance

for the reference see https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions

* Update yml

---------

Co-authored-by: Igor Octaviano <[email protected]>

Author: fedorov

.github/workflows/publish.yml

@@ -4,6 +4,9 @@ on:
     types: [published]
 jobs:
   build:
+    permissions:
+      contents: read
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4