ci: add GitHub Actions permissions

- Add write permissions for contents and packages
- Add permissions at workflow and job level
- Fix GitHub release creation

Author: xanaawakens

.github/workflows/ci.yml

@@ -9,9 +9,16 @@ on:
   release:
     types: [created]
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
     strategy:
       matrix:
         node-version: [16.x, 18.x, 20.x]
@@ -75,6 +82,9 @@ jobs:
     needs: [test, build]
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+    permissions:
+      contents: write
+      packages: write
 
     steps:
     - uses: actions/checkout@v3