ci: 🎡 修复权限问题

.github/workflows/docker-build.yml

@@ -10,6 +10,12 @@ on:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    permissions:
+        contents: read
+        packages: write
+        # This is used to complete the identity challenge
+        # with sigstore/fulcio when running outside of PRs.
+        id-token: write
 
     steps:
       - name: Checkout code