Add comment to permission grants

Author: bdukes

.github/workflows/ci.yml

@@ -59,8 +59,8 @@ jobs:
     name: "Build and Validate"
     runs-on: "windows-2025-vs2026"
     permissions:
-      checks: "write"
-      pull-requests: "write"
+      checks: "write" # needed by EnricoMi/publish-unit-test-result-action
+      pull-requests: "write" # needed by EnricoMi/publish-unit-test-result-action
     defaults:
       run:
         shell: "pwsh"
@@ -156,9 +156,9 @@ jobs:
     if: ${{ github.event_name == 'workflow_dispatch' }}
     runs-on: "ubuntu-latest"
     permissions:
-      id-token: "write"
+      id-token: "write" # needed by actions/attest
       contents: "read"
-      attestations: "write"
+      attestations: "write" # needed by actions/attest
     steps:
       - name: "Download Artifacts"
         uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8.0.1
@@ -180,7 +180,7 @@ jobs:
     if: ${{ github.event_name == 'workflow_dispatch' }}
     runs-on: "ubuntu-latest"
     permissions:
-      id-token: "write"
+      id-token: "write" # needed by NuGet/login
     defaults:
       run:
         shell: "pwsh"