fix: add id-token write permission to Docker workflow

- Add id-token: write permission to enable OIDC authentication
- Required for pushing Docker images to external registries like gchr
- Fixes failing Docker builds during semantic releases

Closes #1954

.github/workflows/docker.yaml

@@ -13,6 +13,7 @@ concurrency:
 permissions:
   packages: write
   contents: read
+  id-token: write
 
 env:
   REGISTRY: ghcr.io