Current behavior:
#1946 adds a CD workflow to release build artifacts on PyPI and GH upon successful completion of the CI workflow for a pushed release tag.
The newly added workflow does not yet configure permissions.
Current behavior:
No permission config in cd.yml
Expected behavior:
Permission config cd.yml