Grant publish job the power to create releases

The power was removed when we added the ability to write id-tokens

Author: blairconrad

.github/workflows/build.yml

@@ -75,8 +75,8 @@ jobs:
     runs-on: ubuntu-latest
 
     permissions:
-      # IMPORTANT: this permission is mandatory for trusted publishing
-      id-token: write
+      contents: write # for creating the release
+      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
 
     steps:
       - name: Reject build if release name disagrees with tag