add perms and ref breaking build

.github/workflows/deploy.yml

@@ -9,9 +9,12 @@ jobs:
     name: Build documentation
     permissions:
         id-token: write
+        contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.pull_request.head.ref }}
     - name: Convert Notebooks
       run: scripts/convert_notebooks.sh
     - name: Commit update