ci: fix GitHub release step — add contents:write permission and create tag

The GITHUB_TOKEN lacked write access causing a 403 on release creation.
Also adds an explicit git tag push before the release step, required when
the workflow is triggered by a branch push rather than a tag push.

Author: Cristhian Luna

.github/workflows/publish.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
 
     steps:
       - name: Checkout
@@ -66,6 +68,11 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
+      - name: Create git tag
+        run: |
+          git tag v${{ steps.pkg.outputs.version }}
+          git push origin v${{ steps.pkg.outputs.version }}
+
       - name: Create GitHub release
         uses: softprops/action-gh-release@v2
         with: