Conditionally run snapshot release, actually make OIDC publishing work (#1670)

Author: askoufis

.github/workflows/release.yml

@@ -11,6 +11,8 @@ jobs:
     name: Publish & Deploy
     if: github.event_name == 'push'
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     env:
       CI: true
     steps:
@@ -42,7 +44,10 @@ jobs:
 
   snapshot:
     name: Publish snapshot version
+    if: github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     env:
       CI: true
     steps: