Setup GCloud Auth with correct id-token permission for release verifi…

…cation (#1325)

This pull request adds permissions for the google-github-action on
pulumi-gcp when release verification is enabled.

Fixes #1324.

provider-ci/internal/pkg/templates/provider/.github/workflows/verify-release.yml

@@ -70,6 +70,11 @@ jobs:
         runner: ["ubuntu-latest"]
 #{{- end }}#
     runs-on: ${{ matrix.runner }}
+#{{- if and .Config.ReleaseVerification .Config.GCP }}#
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+#{{- end }}#
     steps:
       - name: Configure Git to checkout files with long names
         run: git config --global core.longpaths true