Hot fix to sphinx workflow

.github/workflows/sphinx.yaml

@@ -9,11 +9,6 @@ on:
     types: [published]
   workflow_dispatch:
 
-# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
-permissions:
-  actions: read
-  pull-requests: write
-
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -86,6 +81,10 @@ jobs:
     # Deploy to the github-pages environment
     # but not on PRs
     if: ${{ github.event_name != 'pull_request' }}
+    permissions:
+      pages: write
+      id-token: write
+
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}