Add permissions

Author: stevebux

.github/workflows/stage-5-publish.yaml

@@ -226,6 +226,10 @@ jobs:
     name: "Publish OAS spec (${{ matrix.apimEnv }})"
     runs-on: ubuntu-latest
     needs: [publish]
+    permissions:
+      id-token: write # This is required for requesting the JWT
+      contents: read # This is required for actions/checkout
+      packages: read # This is required for downloading from GitHub Package Registry
     timeout-minutes: 10
     strategy:
       matrix: