fix(workflows): give id-token write permission to nightly and release-assets oci

.github/workflows/nightly.yml

@@ -126,6 +126,8 @@ jobs:
         - krata-guest-init
     name: nightly oci build ${{ matrix.component }}
     permissions:
+      contents: read
+      id-token: write
       packages: write
     steps:
     - name: harden runner

.github/workflows/release-assets.yml

@@ -123,7 +123,8 @@ jobs:
         - krata-guest-init
     name: release-assets oci ${{ matrix.component }}
     permissions:
-      contents: write
+      contents: read
+      id-token: write
       packages: write
     steps:
     - name: harden runner