ci: Explicitly set id-token: write for individual workflows

Author: sourcefrog

.github/workflows/release-plz.yml

@@ -16,6 +16,7 @@ jobs:
     if: ${{ github.repository_owner == 'sourcefrog' }}
     permissions:
       contents: write
+      id-token: write
     steps:
       - &checkout
         name: Checkout repository
@@ -43,6 +44,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      id-token: write
     concurrency:
       group: release-plz-${{ github.ref }}
       cancel-in-progress: false