CI perms

Author: MichaelGoodale

.github/workflows/CI.yml

@@ -51,6 +51,9 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      pages: write
     needs: docs
     steps:
       - name: Deploy to GitHub Pages