fix(ci): grant id token write permissions to canary

[mselim00]

Issue #, if available:

Description of changes:
Intended to fix failures like this - https://github.com/awslabs/amazon-eks-ami/actions/runs/23328159075

These occur because the ci-canary workflow only has permissions for contents read but calls to a setup job as well as the ci workflow which both additionally require id-token write, xref:

amazon-eks-ami/.github/workflows/ci.yaml

Lines 46 to 48 in a1d0859

	permissions:
	id-token: write
	contents: read

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Testing Done
N/A

See this guide for recommended testing for PRs. Some tests may not apply. Completing tests and providing additional validation steps are not required, but it is recommended and may reduce review time and time to merge.