fix: add trusted-publisher permissions

Author: agoose77

.github/workflows/ci-cd.yml

@@ -77,6 +77,9 @@ jobs:
     needs: [dist, checks]
     runs-on: ubuntu-latest
     if: github.event_name == 'release' && github.event.action == 'published'
+    environment: release
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v4
         with: