potentially fix trusted publishing (#376)

Author: chdsbd

.github/workflows/python.yml

@@ -137,6 +137,9 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
     if: "startsWith(github.ref, 'refs/tags/')"
     needs: [linux, windows, macos, sdist]
     steps: