fix: Update permissions in hydrun CI workflow for build provenance ac…

…tion

.github/workflows/hydrun.yaml

@@ -1,5 +1,7 @@
 name: hydrun CI
 
+permissions: write-all # Necessary for the generate-build-provenance action
+
 on:
   push:
   pull_request:
@@ -68,7 +70,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
-      id-token: write
     needs: build-linux
 
     steps: