fix(ci): grant contents write to the release workflow

The release job creates the tag and the GitHub release, which needs
contents: write. The workflow got contents: read in #261, so the 1.46.0
release failed with 403 after the package was already published.

Author: mogita

.github/workflows/release.yml

@@ -7,7 +7,8 @@ on:
       - main
 
 permissions:
-  contents: read
+  # write is needed to create the tag and the GitHub release
+  contents: write
   pull-requests: read
 
 jobs: