move workflow file, update permissions (#16)

Author: jakemac53

.github/publish.yaml renamed to .github/workflows/publish.yaml

@@ -16,3 +16,6 @@ jobs:
     with:
       # Protected github deployment environment, requires approval to publish.
       environment: pub.dev
+    permissions:
+      id-token: write
+      pull-requests: write