Add id token to main CI for TestPyPi

Author: anuraaga

.github/workflows/ci.yaml

@@ -1,13 +1,15 @@
 name: CI
-permissions:
-  contents: read
 on:
   push:
     branches:
       - main
   pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read
+  id-token: write
+
 concurrency:
   # Cancel in-progress jobs for PRs only
   group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.sha || github.ref }}