feat: add id-token permission for OIDC PyPI publishing

Author: craigtracey

.github/workflows/regenerate-client.yml

@@ -18,6 +18,9 @@ on:
 jobs:
   regenerate:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4