Add minimum token permissions for all github workflow files (#1892)

Co-authored-by: otelbot <197425009+otelbot@users.noreply.github.com>

Author: opentelemetrybot

.github/workflows/layer-publish.yml

@@ -42,11 +42,12 @@ on:
         type: string
 
 permissions:
-  id-token: write
   contents: read
 
 jobs:
   publish_layer:
+    permissions:
+      id-token: write # required for AWS OIDC authentication
     runs-on: ubuntu-latest
 
     steps: