chore(ci): id-token and attestations write permissions for builds (#956)

Author: DerekRoberts

.github/workflows/db-major-upgrade.yml

@@ -38,6 +38,8 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       packages: write
+      id-token: write
+      attestations: write
 
     steps:
     - name: Checkout

.github/workflows/demo.yml

@@ -16,6 +16,8 @@ jobs:
     runs-on: ubuntu-24.04
     permissions:
       packages: write
+      id-token: write
+      attestations: write
     strategy:
       matrix:
         package: [admin, api, db, public]

.github/workflows/pr-open.yml

@@ -15,6 +15,8 @@ jobs:
     runs-on: ubuntu-24.04
     permissions:
       packages: write
+      id-token: write
+      attestations: write
     strategy:
       matrix:
         package: [admin, api, db, public]