Fix trusted publisher permissions

Author: dwoz

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ on:
           --outdir dist/
     secrets:
       PRIVATE_KEY:
-        required: true
+        required: false
 
 jobs:
 

.github/workflows/deploy-package-action.yml

@@ -11,6 +11,8 @@ jobs:
     name: Publish Python Wheel
     runs-on: ubuntu-latest
     environment: release
+    permissions:
+      id-token: write
     steps:
 
       - name: Download Source Tarball Artifact