ci(github): add permissions to release-please workflow

Author: remarkablemark

.github/workflows/release-please.yml

@@ -9,6 +9,9 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
+    permissions:
+      contents: write
+      pull-requests: write
 
     steps:
       - name: Release Please
@@ -19,11 +22,11 @@ jobs:
 
   publish:
     runs-on: ubuntu-latest
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created }}
     permissions:
       contents: read
       id-token: write
-    needs: release-please
-    if: ${{ needs.release-please.outputs.release_created }}
 
     steps:
       - name: Checkout repository