Fix container publication workflow (#12)

* Set permissions

* Fix folder

Author: leplatrem

.github/workflow/cd.yaml renamed to .github/workflows/cd.yaml

@@ -10,10 +10,14 @@ on:
     tags:
     - v[0-9]+.[0-9]+.[0-9]+
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   build-and-publish:
     name: Build and publish the container image
-    uses: mozilla/remote-settings/actions/ingestion-job-publish@main
+    uses: mozilla/remote-settings/.github/workflows/ingestion-job-publish.yaml@main
     with:
       # Publish `main` branch to `nonprod` and tags to `prod`
       realm: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && 'prod' || 'nonprod' }}