fix: add permissions for publish job (#12)

<!--
Thanks for your contribution! Take a moment to answer these questions so
that reviewers have the information they need to properly understand
your changes:

* What is the current state of things and why does it need to change?
* What is the solution your changes offer and how does it work?

Are there any issues or other links reviewers should consult to
understand this pull request better? For instance:

* Fixes #12345
* See: #67890
-->

Author: pnarayanaswamy

.github/workflows/publish-release.yml

@@ -8,6 +8,9 @@ on:
       SLACK_WEBHOOK_URL:
         required: true
 
+permissions:
+  contents: read
+
 jobs:
   publish-release:
     permissions:
@@ -35,8 +38,6 @@ jobs:
 
   publish-npm-dry-run:
     needs: publish-release
-    permissions:
-      id-token: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout and setup environment
@@ -59,6 +60,7 @@ jobs:
   publish-npm:
     needs: publish-npm-dry-run
     permissions:
+      contents: read
       id-token: write
     runs-on: ubuntu-latest
     environment: npm-publish