Fix Pages deploy workflow authentication by granting OIDC token permission

[Copilot]

The deploy GitHub Actions job failed during actions/deploy-pages@v5 with 401 Requires authentication while creating the Pages deployment. Root cause was missing OIDC permission for the deploy job.

• Root cause

  • deploy-pages requires an OIDC token to create the Pages deployment.
  • Workflow permissions included pages: write but did not grant id-token: write for the deploy path.

• Workflow change

  • Added explicit job/workflow permissions for Pages deployment:
    • pages: write
    • id-token: write
  • Kept permissions scoped to deployment needs only.

• Resulting behavior

  • actions/deploy-pages@v5 can mint the OIDC token and authenticate deployment creation instead of failing with 401.

permissions:
  contents: read
  pages: write
  id-token: write

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.