ci: define packages permission in publish step

Signed-off-by: strawberry <strawberry@puppygock.gay>

.github/workflows/ci.yml

@@ -166,6 +166,9 @@ jobs:
         runs-on: ubuntu-latest
         needs: build
         if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/dev'
+        permissions:
+            packages: write
+            contents: read
         steps:
             - name: Download artifacts
               uses: actions/download-artifact@v4