chore: update Claude permissions and add id-token write permission

- Add various tool permissions to settings.local.json
- Add id-token: write permission to docker workflow

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

.claude/settings.local.json

@@ -10,7 +10,23 @@
       "Bash(go build *)",
       "Bash(go vet *)",
       "Bash(go run *)",
-      "Bash(curl -s \"http://localhost:9998/api/v1/dev/cards?page=1&page_size=20\" -H \"Authorization: Bearer test\")"
+      "Bash(curl -s \"http://localhost:9998/api/v1/dev/cards?page=1&page_size=20\" -H \"Authorization: Bearer test\")",
+      "Bash(cmake --version)",
+      "Bash(g++ --version)",
+      "Bash(clang++ --version)",
+      "Bash(where cl *)",
+      "Bash(where mingw32-make *)",
+      "Bash(where vcpkg *)",
+      "Read(//c//**)",
+      "Bash(pip show *)",
+      "Bash(curl -L -o D:/Code/verify/sdk/cpp/deps/json.hpp https://raw.githubusercontent.com/nlohmann/json/v3.11.3/single_include/nlohmann/json.hpp)",
+      "Bash(clang++ -std=c++17 -o verify_test.exe simple_test.cpp -lwinhttp)",
+      "Bash(./verify_test.exe --json-only)",
+      "Bash(./verify_test.exe --url https://gendan.xyz --key test_app_key)",
+      "Bash(sqlite3 verification_platform.db \"SELECT id, name, app_key, status FROM applications LIMIT 5;\")",
+      "Bash(curl -s https://gendan.xyz/api/install/status)",
+      "Bash(curl *)",
+      "Bash(./verify_test.exe --url https://gendan.xyz --key abab3280114bfe824acfdbc6255538fb)"
     ]
   }
 }

.github/workflows/docker.yml

@@ -18,6 +18,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
 
     steps:
       - name: Checkout repository