fix(ci): set permissions in main workflow

.github/workflows/actions/publish-npm/action.yml

@@ -7,6 +7,7 @@ inputs:
     description: 'The tag to publish to on NPM.'
   token:
     description: 'The NPM authentication token required to publish.'
+
 runs:
   using: 'composite'
   steps:

.github/workflows/release.yml

@@ -75,6 +75,7 @@ jobs:
     needs: [build_stencil_sass]
     runs-on: ubuntu-latest
     permissions:
+      contents: write
       id-token: write
     steps:
       - name: Checkout Code