chore: update GitHub Actions workflow for improved deployment process

Author: gverduci

.github/workflows/main.yml

@@ -7,10 +7,16 @@ name: Deploy Extension
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
       - run: npm run install:all:ci
       - name: Release
         env: