ci: add support to OIDC in publish.yml

Author: lajbel

.github/workflows/publish.yml

@@ -11,6 +11,10 @@ on:
         required: true
         default: "4000.0.0"
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest