ci: fix permissions

Author: rameezk

.github/workflows/ci.yml

@@ -35,6 +35,9 @@ jobs:
   test:
     name: Python ${{ matrix.python-version }}
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     strategy:
       fail-fast: false
       matrix:
@@ -68,6 +71,9 @@ jobs:
   nix-check:
     name: Nix Flake Check
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@v4