Update workflow permissions for finer-grained access

Refined permissions in release.yml: set top-level to read-only,
granted build job read access to contents/packages, and release
job write access to contents. Enhances security and clarity.

#35

Author: ziagham

.github/workflows/release.yml

@@ -14,8 +14,7 @@ on:
         default: false
 
 permissions:
-  contents: write
-  packages: read
+  contents: read
 
 jobs:
   validate:
@@ -32,6 +31,9 @@ jobs:
 
   build:
     needs: validate
+    permissions:
+      contents: read
+      packages: read
     strategy:
       matrix:
         include:
@@ -107,6 +109,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: build
     if: github.ref == 'refs/heads/main'
+    permissions:
+      contents: write
     env:
       ARTIFACT_DIR: ./release
     steps: