Add id-token and attestations permissions to Docker workflow: - id-token: write - Required for OIDC token generation - attestations: write - Required for artifact attestations Also add missing step ID to build-and-push step so attestation step can reference the digest output. Fixes: Error: Failed to get ID token: Unable to get ACTIONS_ID_TOKEN_REQUEST_URL env variable 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>