fix: add id-token: write permission to publish workflow for NuGet OIDC login

[Copilot]

NuGet/login@v1 uses GitHub OIDC to mint a short-lived API key, but the build job was missing the id-token: write permission — causing the action to fail when attempting to fetch the OIDC token.

Changes

• .github/workflows/publish.yml — added permissions.id-token: write to the build job:

  build:
    runs-on: windows-latest
    permissions:
      id-token: write   # required for NuGet/login OIDC token exchange

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.