Update job permissions

Signed-off-by: Gerald Venzl <[email protected]>

Author: gvenzl

.github/workflows/build-doc-mcp.yml

@@ -17,6 +17,9 @@ jobs:
 
     permissions:
       packages: write
+      contents: read
+      attestations: write
+      id-token: write
 
     name: 🛠️ Build image
     runs-on: ${{ matrix.runner }}
@@ -52,6 +55,9 @@ jobs:
 
     permissions:
       packages: write
+      contents: read
+      attestations: write
+      id-token: write
 
     steps:
       - name: 🫸 Push multi-arch image to Container Registry