fix publish permissions

Author: duttonw

.github/workflows/publish.yml

@@ -29,9 +29,15 @@ on:
         default: true
 
 
+permissions:
+  contents: read
+  pages: write
+  actions: read
+  id-token: write
 
 jobs:
 
+
   validateVersion:
     runs-on: ubuntu-latest
     if: github.repository == 'duttonw/ckanext-pycharm-debugger'
@@ -57,6 +63,7 @@ jobs:
     needs: validateVersion
     name: Test
     uses: ./.github/workflows/test.yml # Call the reusable workflow
+    secrets: inherit
 
   publishSkipped:
     if: github.repository != 'duttonw/ckanext-pycharm-debugger'