Add required permission for npm trusted publishing

See https://docs.npmjs.com/trusted-publishers#supported-cicd-providers. Migrating away from direct api tokens.

Author: jklein24

.github/workflows/test-release-sync.yaml

@@ -155,6 +155,7 @@ jobs:
     name: Release
     needs: ["checks", "build"]
     permissions:
+      id-token: write
       contents: write
       pull-requests: write
     if: "success() && github.event_name == 'push'"