Merge #404 by ted-xie: Attempt to fix release.yml again

Closes #404

COPYBARA_INTEGRATE_REVIEW=https://github.com/bazelbuild/rules_android/pull/404 from ted-xie:release_yml 02afd009a9deae8c97a1b8e8ebcc25b055d17425
PiperOrigin-RevId: 794243221
Change-Id: Ieaa3cc97297309836182120ffa45abb69a69321d

.github/workflows/release.yml

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0158ec6..2891bba 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,6 +9,8 @@
       - "v*.*.*"
 
 permissions:
+  attestations: write
+  id-token: write
   contents: write
 
 jobs: