chore: add write permission for publish-npm (#249)

Author: hardfist

.github/workflows/release.yml

@@ -41,8 +41,6 @@ on:
           - npm
           - extension
 permissions:
-  # Provenance generation in GitHub Actions requires "write" access to the "id-token"
-  id-token: write
   contents: read
 env:
   GO_VERSION: '1.24.1'
@@ -54,6 +52,11 @@ jobs:
     needs: [build]
     runs-on: ubuntu-22.04
     environment: npm
+    permissions:
+      # For push git tags
+      contents: write
+      # For Trusted Publish
+      id-token: write
     steps:
       - name: Show dry-run status
         run: |