fix(publish): missing id-token write permission (#535)

fix(publish): missing id-token write permission (#535) #1384