ci: set permissions

Signed-off-by: Joshua Chapman <joshua.chapman@secomind.com>

Author: joshuachp

.github/workflows/publish.yaml

@@ -12,6 +12,7 @@ on:
 # Only needs to clone the repository
 permissions:
   contents: write
+  id-token: write
 # Safer shell
 defaults:
   run:

CHANGELOG.md

@@ -11,7 +11,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.10.0] - 2025-10-17
 
 ### Added