ci: set run-many use publish.yml

Author: klerick

.github/workflows/publish.yml

@@ -14,6 +14,10 @@ env:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: "read"
+      actions: "read"
+      id-token: "write" # needed for provenance data generation
     steps:
       - name: Checkout
         uses: actions/checkout@v4