🔧 Unattended release signing (#65)

During the work, I discovered that we could sign more than _just_ checksums,
but I'm hesitant to enable it as it grows the asset list and I am personally unsure
of the upside. Let's stick to signing just checksums for now until there are
incentives to do more.

Author: wilsonehusin

.github/workflows/release.yaml

@@ -4,6 +4,11 @@ on:
   push:
     tags: [ '*' ]
 
+permissions:
+  contents: write
+  id-token: write
+  packages: write
+
 jobs:
   goreleaser:
     runs-on: ubuntu-latest