Fixup GHA token permission for releasing

[ps-jay]

Hoping to fix this error:

  Attempting to create or update release tag "1.13.0"
  Could not create new tag "refs/tags/1.13.0" (Resource not accessible by integration) therefore updating existing tag "tags/1.13.0"
  Error: Resource not accessible by integration

[Copilot]

Pull request overview

Updates the “Test and Release” GitHub Actions workflow to allow the release job to write repository contents (needed for creating tags/releases) by adjusting the GITHUB_TOKEN permissions.

Changes:

• Add an explicit job-level permissions block to the release job.
• Grant contents: write for the release job.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Setting a job-level permissions block overrides the default token permissions for all scopes. Since this job uses actions/download-artifact, it typically needs actions: read to fetch artifacts; with only contents: write, the step can fail with 403. Consider explicitly adding actions: read (and any other required scopes) alongside contents: write so the release job can still download artifacts.

Suggested change

	contents: write
	contents: write
	actions: read

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.