🔧 [Docs]: Update permissions in workflow for Pages deployment and add id-token for source verification

Author: MariusStorhaug

.github/workflows/workflow.yml

@@ -67,6 +67,8 @@ permissions:
   contents: write      # to checkout the repo and create releases on the repo
   pull-requests: write # to write comments to PRs
   statuses: write      # to update the status of the workflow from linter
+  pages: write         # to deploy to Pages
+  id-token: write      # to verify the deployment originates from an appropriate source
 
 jobs:
   Get-Settings:

README.md

@@ -269,8 +269,7 @@ in the workflow file.
 
 | Name | Location | Description | Default |
 | ---- | -------- | ----------- | ------- |
-| `GITHUB_TOKEN` | `github` context | The token used to authenticate with GitHub. | `${{ secrets.GITHUB_TOKEN }}` |
-| `APIKey` | GitHub secrets | The API key for the PowerShell Gallery. | N/A |
+| `APIKEY` | GitHub secrets | The API key for the PowerShell Gallery. | N/A |
 | `TEST_APP_ENT_CLIENT_ID` | GitHub secrets | The client ID of an Enterprise GitHub App for running tests. | N/A |
 | `TEST_APP_ENT_PRIVATE_KEY` | GitHub secrets | The private key of an Enterprise GitHub App for running tests. | N/A |
 | `TEST_APP_ORG_CLIENT_ID` | GitHub secrets | The client ID of an Organization GitHub App for running tests. | N/A |