fix: Resolving google-github-actions/auth@v1.1.1 failures

[pattishin]

Description

Issue: Prevalent error that's been blocking many PRs around google-github-actions/auth@v1.1.1.

Our default in the workflow template does not specify permissions for id_token (ref: https://github.com/google-github-actions/auth#usage). This should resolve future new workflows created in PRs and current ones.

To see issue:

Test PR: #3275

Examples of PRs showing this failure atm:

• https://github.com/GoogleCloudPlatform/nodejs-docs-samples/actions/runs/5273734922/jobs/9537491070?pr=3276
• https://github.com/GoogleCloudPlatform/nodejs-docs-samples/actions/runs/5273550512/jobs/9537111531?pr=3270
• https://github.com/GoogleCloudPlatform/nodejs-docs-samples/actions/runs/5273444018/jobs/9536921081?pr=3268

To verify:

Focus on .github/workflows/utils/ci.yaml.njk and package.json for the main changes. The rest are only to add the missing permissions to affected workflows. This fix should unblock the above PRs.

Checklist

• [ x ] I have followed guidelines from CONTRIBUTING.MD and Samples Style Guide
• Tests pass: npm test (see Testing)
• Lint pass: npm run lint (see Style)
• These samples need a new API enabled in testing projects to pass (let us know which ones)
• These samples need a new/updated env vars in testing projects set to pass (let us know which ones)
• This sample adds a new sample directory, and I updated the CODEOWNERS file with the codeowners for this sample
• This sample adds a new sample directory, and I created GitHub Actions workflow for this sample
• This sample adds a new Product API, and I updated the Blunderbuss issue/PR auto-assigner with the codeowners for this sample
• [ x ] Please merge this PR for me once it is approved