ops: update write permissions for release (#723)

Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

Author: spiffcs

.github/workflows/release.yaml

@@ -51,7 +51,7 @@ jobs:
     environment: release # gates release on required reviewers
     runs-on: ubuntu-24.04
     permissions:
-      contents: read # tag pushes go via TAG_TOKEN, not GITHUB_TOKEN
+      contents: write # for creating the GitHub release (tag pushes go via TAG_TOKEN)
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with: