ci: Fix trusted pypi publish job (#1648)

This is a required setting for
[gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish/tree/release/v1/?tab=readme-ov-file#usage)

.github/workflows/python-wheels.yml

@@ -9,6 +9,11 @@ name: Build and publish python wheels
 # this workflow will publish the wheels to pypi.
 # If the version is already published, pypi just ignores it.
 
+
+permissions:
+  # This permission is required for trusted publishing on pypi
+  id-token: write
+
 on:
   workflow_dispatch:
   push:
@@ -74,4 +79,4 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           verbose: true
-          skip-existing: true
+          skip-existing: true