Update perms for lockfiles

Author: landonxjames

.github/workflows/manual-update-lockfiles.yml

@@ -16,6 +16,9 @@ on:
         type: boolean
         default: false
 
+permissions:
+  id-token: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ inputs.base_branch }}
   cancel-in-progress: true

.github/workflows/prod-release.yml

@@ -17,6 +17,12 @@ on:
         required: true
         type: string
 
+permissions:
+  actions: read
+  contents: read
+  id-token: write
+  pull-requests: read
+
 jobs:
   smithy-rs-prod-release:
     name: Prod release