ci(github): set permissions in workflow release-please.yml

Author: remarkablemark

.github/workflows/release-please.yml

@@ -7,6 +7,9 @@ on:
 jobs:
   release-please:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
 
@@ -19,11 +22,11 @@ jobs:
 
   publish:
     runs-on: ubuntu-latest
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created }}
     permissions:
       contents: read
       id-token: write
-    needs: release-please
-    if: ${{ needs.release-please.outputs.release_created }}
 
     steps:
       - name: Checkout repository