Allow content write for gh release upload

Signed-off-by: Christian Heimes <[email protected]>

Author: tiran

.github/workflows/pypi.yaml

@@ -15,7 +15,8 @@ on:
             - published
 
 permissions:
-    contents: read
+    # allow gh release upload
+    contents: write
     # see https://docs.pypi.org/trusted-publishers/
     id-token: write
 
@@ -73,7 +74,6 @@ jobs:
 
             - uses: sigstore/[email protected]
               with:
-                  upload-signing-artifacts: true
                   inputs: >-
                       ./dist/*.tar.gz
                       ./dist/*.whl