fix ci

Author: tomchen

.github/workflows/docs.yml

@@ -5,6 +5,11 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+  id-token: write
+  pages: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -35,3 +40,8 @@ jobs:
         uses: actions/deploy-pages@v4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write