move permissions to job

Author: njzjz

.github/workflows/test_cc.yml

@@ -103,6 +103,8 @@ jobs:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with:
           use_oidc: true
+    permissions:
+      id-token: write
   pass:
     name: Pass testing C++
     needs: [testcc]
@@ -113,5 +115,3 @@ jobs:
         uses: re-actors/alls-green@release/v1
         with:
           jobs: ${{ toJSON(needs) }}
-permissions:
-  id-token: write

.github/workflows/test_python.yml

@@ -81,6 +81,8 @@ jobs:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with:
           use_oidc: true
+    permissions:
+      id-token: write
   update_durations:
     name: Combine and update integration test durations
     runs-on: ubuntu-22.04
@@ -116,5 +118,3 @@ jobs:
         uses: re-actors/alls-green@release/v1
         with:
           jobs: ${{ toJSON(needs) }}
-permissions:
-  id-token: write