chore: fix workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: scc-tw

.github/workflows/build.yml

@@ -1,4 +1,5 @@
 name: "release"
+permissions: {contents: read}
 
 on: {
     "push": {
@@ -47,6 +48,7 @@ jobs: {
         ],
     },
     release: {
+        permissions: {contents: write},
         "runs-on": "ubuntu-latest",
         "needs": "build",
         "steps": [