fix(ci): add missing permissions to publish-charts and publish-cli jobs

Add required permissions blocks to fix 403 Forbidden errors when
publishing charts to ghcr.io and uploading CLI release assets.

- publish-charts: add packages:write for ghcr.io chart publishing
- publish-cli: add contents:write for release asset uploads

Author: thomastaylor312

.github/workflows/release.yaml

@@ -127,6 +127,9 @@ jobs:
 
   publish-charts:
     needs: publish-image
+    permissions:
+      contents: read
+      packages: write # Used to push charts to `ghcr.io`
     runs-on: ubuntu-latest
     steps:
     - name: Determine which repository to use
@@ -175,6 +178,8 @@ jobs:
 
   publish-cli:
     if: github.event_name == 'release'
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     container:
       image: golang:1.24.5-bookworm