ci(publish): explicit workflow permissions (#27)

Signed-off-by: Chris Gianelloni <[email protected]>

Author: wolf31o2

.github/workflows/publish.yml

@@ -272,6 +272,8 @@ jobs:
   github-release:
     runs-on: ubuntu-latest
     needs: [multi-arch-manifest]
+    permissions:
+      contents: write
     steps:
       - run: "echo \"RELEASE_TAG=${GITHUB_REF#refs/tags/}\" >> $GITHUB_ENV"
       - uses: actions/github-script@v7