Set write permissions at the job-level for release.yml

Resolves https://github.com/franchb/.github-go/security/code-scanning/1

.github/workflows/release.yml

@@ -1,7 +1,7 @@
 name: release
 
 permissions:
-    contents: write
+    contents: read
 
 on:
   workflow_call:
@@ -15,6 +15,8 @@ on:
 jobs:
   run:
     name: Release
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner