update requested permissions for python ci-cd

Author: reece

.github/workflows/ci-cd.yml

@@ -13,6 +13,9 @@ on:
 jobs:
   python-ci-cd:
     name: python-ci-cd
+    permissions:
+      contents: write
+      id-token: write
     uses: biocommons/.github/.github/workflows/python-ci-cd.yml@6-consolidate-python-workflows
     with:
       run-deploy: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}