Fix release.yml: restore contents:write permission on publish job

Job-level permissions replace workflow-level ones entirely rather than
merging with them - adding id-token:write for OIDC silently dropped
the contents:write needed by action-gh-release, causing a 403 when
creating the GitHub Release after a successful NuGet push.

Author: GREENFONTS

.github/workflows/release.yml

@@ -60,6 +60,7 @@ jobs:
     environment: nuget-release
     permissions:
       id-token: write # required to request the GitHub OIDC token for NuGet Trusted Publishing
+      contents: write # required by softprops/action-gh-release to create the GitHub Release
     steps:
       - uses: actions/download-artifact@v8
         with: