fix: need id_token permission for oidc

[c0state]

Need id-token permission for OIDC to work

References:

• https://docs.github.com/en/actions/how-tos/secure-your-work/security-harden-deployments/oidc-in-pypi#updating-your-github-actions-workflow
• https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#defining-a-workflow-job-environment

[c0state]

Also, I think twine should work, but could use pypa/gh-action-pypi-publish per https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#publishing-the-distribution-to-pypi if not