remove contents: write permission and add back explanatory comments that were lost

Author: edwinokonkwo

.github/workflows/release-please.yml

@@ -35,8 +35,8 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     permissions:
-      contents: write
-      pull-requests: write
+      contents: write # Needed for release-please to create releases.
+      pull-requests: write # Needed for release-please to create/update PRs.
     if: github.event_name == 'push'
     outputs:
       package-server-ai-released: ${{ steps.release.outputs['packages/sdk/server-ai--release_created'] }}
@@ -49,8 +49,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: ['release-please']
     permissions:
-      id-token: write
-      contents: write
+      id-token: write # Needed for OIDC to get release secrets from AWS.
     if: ${{ needs.release-please.outputs.package-server-ai-released == 'true' }}
     steps:
       - uses: actions/checkout@v4
@@ -89,8 +88,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: ['release-please']
     permissions:
-      id-token: write
-      contents: write
+      id-token: write # Needed for OIDC to get release secrets from AWS.
     if: ${{ always() && !failure() && !cancelled() && needs.release-please.outputs.package-server-ai-langchain-released == 'true' }}
     steps:
       - uses: actions/checkout@v4
@@ -129,8 +127,8 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event_name == 'workflow_dispatch'
     permissions:
-      id-token: write
-      contents: read
+      id-token: write # Needed for OIDC to get release secrets from AWS.
+      contents: read # Needed for actions/checkout.
     steps:
       - uses: actions/checkout@v4