fixed permissions (#246)

Author: eavanvalkenburg

.github/workflows/python-merge-tests.yml

@@ -1,12 +1,12 @@
-name: Python - Tests - Merge
+name: Python - Merge - Tests
 
 on:
   workflow_dispatch:
   merge_group:
     branches: ["main"]
 
 permissions:
-  contents: read
+  contents: write
   id-token: write
 
 env:
@@ -31,8 +31,6 @@ jobs:
       OPENAI_CHAT_MODEL_ID: ${{ vars.OPENAI__CHATMODELID }}
       OPENAI_API_KEY: ${{ secrets.OPENAI__APIKEY }}
       PACKAGE_NAME: "main"
-    permissions:
-      contents: write
     defaults:
       run:
         working-directory: python
@@ -85,8 +83,6 @@ jobs:
       AZURE_OPENAI_CHAT_DEPLOYMENT_NAME: ${{ vars.AZUREAI__DEPLOYMENTNAME }}
       AZURE_OPENAI_ENDPOINT: ${{ secrets.AZUREAI__ENDPOINT }}
       PACKAGE_NAME: "azure"
-    permissions:
-      contents: write
     defaults:
       run:
         working-directory: python
@@ -102,12 +98,6 @@ jobs:
       - name: Install the project
         run: |
           uv sync --all-packages --all-extras --dev -U --prerelease=if-necessary-or-explicit
-      - name: Check setup
-        run: |
-          az version
-          echo "ACTIONS_ID_TOKEN_REQUEST_URL = $ACTIONS_ID_TOKEN_REQUEST_URL"
-          echo "ACTIONS_ID_TOKEN_REQUEST_TOKEN = $ACTIONS_ID_TOKEN_REQUEST_TOKEN"
-          echo "TENANT_ID=${{ secrets.AZURE_TENANT_ID }}"
       - name: Azure CLI Login
         if: github.event_name != 'pull_request'
         uses: azure/login@v2
@@ -152,8 +142,6 @@ jobs:
       FOUNDRY_PROJECT_ENDPOINT: ${{ vars.FOUNDRY_PROJECT_ENDPOINT }}
       FOUNDRY_MODEL_DEPLOYMENT_NAME: ${{ vars.FOUNDRY_MODEL_DEPLOYMENT_NAME }}
       PACKAGE_NAME: "foundry"
-    permissions:
-      contents: write
     defaults:
       run:
         working-directory: python