ci(github): refactor release-please.yml

Author: remarkablemark

.github/workflows/release-please.yml

@@ -7,13 +7,12 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      issues: write
-      pull-requests: write
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
       tag_name: ${{ steps.release.outputs.tag_name }}
+    permissions:
+      contents: write
+      pull-requests: write
 
     steps:
       - name: Release Please
@@ -26,12 +25,12 @@ jobs:
     needs: release
     if: ${{ needs.release.outputs.release_created }}
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
     environment:
       name: pypi
       url: https://pypi.org/p/python-cli-template
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
       - name: Checkout repository