ci: add OIDC configuration to release workflow (#393)

Add id-token write permission to enable npm provenance for enhanced supply-chain security as recommended by semantic-release documentation.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-authored-by: Claude <noreply@anthropic.com>

Author: wakamsha

.github/workflows/release.yml

@@ -12,6 +12,7 @@ permissions:
   contents: write
   issues: write
   pull-requests: write
+  id-token: write # to enable use of OIDC for npm provenance
 
 jobs:
   release: