Add id-token permission to the publish webapp workflow (#2088)

Add id-token permission to the publish webapp workflow (#2088) #2165