chore: fix permissions for release

Author: alexeagle

.github/workflows/release.yml

@@ -12,6 +12,8 @@ on:
     tags:
       - "v*.*.*"
 permissions:
+  id-token: write
+  attestations: write
   contents: write
 jobs:
   release:
@@ -25,9 +27,5 @@ jobs:
     uses: ./.github/workflows/publish.yaml
     with:
       tag_name: ${{ inputs.tag_name || github.ref_name }}
-    permissions:
-      id-token: write
-      attestations: write
-      contents: write
     secrets:
       publish_token: ${{ secrets.BCR_PUBLISH_TOKEN }}