fix(action): i need token for cosign

.github/workflows/main.yml

@@ -20,6 +20,7 @@ jobs:
     runs-on: ubuntu-20.04
     permissions:
       contents: "write"
+      id-token: "write"
     steps:
       - uses: actions/checkout@v4
       - name: Docker meta