fix workflow (#2927)

### Fixes #
<!-- Mention the issues this PR addresses -->

### Checks

- [ ] Ran `yarn test-build`
- [ ] Updated relevant documentations
- [ ] Updated matching config options in altair-static

### Changes proposed in this pull request:
<!-- Describe the changes being introduced in this PR -->

## Summary by Sourcery

Grant necessary GitHub Actions permissions for release workflows

CI:
- Add write permission for contents to the tauri publish job
- Add write permissions for contents and id-token to the npm publish job

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
  * Updated release workflow configuration.

**Note:** This release contains no user-facing changes.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Author: imolorhe

.github/workflows/release.yml

@@ -13,6 +13,7 @@ env:
   # NODE_OPTIONS: --openssl-legacy-provider
 
 permissions:
+  contents: write
   id-token: write
 
 # TODO: Handle browser extension release
@@ -59,6 +60,8 @@ jobs:
   tauri:
     needs: vars
     uses: ./.github/workflows/_publish-tauri.yml
+    permissions:
+      contents: write
     with:
       node_version: ${{ needs.vars.outputs.node_version }}
     secrets: inherit
@@ -67,6 +70,9 @@ jobs:
     needs: [electron, vars]
     # We do not need to check out the repository to use the reusable workflow
     uses: ./.github/workflows/_publish-npm.yml
+    permissions:
+      contents: write
+      id-token: write
     with:
       node_version: ${{ needs.vars.outputs.node_version }}
     secrets: inherit