Fix: add permissions to publish

[lwasser]

https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#defining-a-workflow-job-environment i'm not actually sure this is the right location for these permissions. or how to test. but i can ask someone in our slack to review?? or do you know @willingc i've not had to setup such permissions before but i've also not published using trusted publisher before i've always used a token.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 41.64%. Comparing base (ef85f62) to head (700d108).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #111   +/-   ##
=======================================
  Coverage   41.64%   41.64%           
=======================================
  Files           4        4           
  Lines         461      461           
  Branches       74       74           
=======================================
  Hits          192      192           
  Misses        268      268           
  Partials        1        1           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.