Fix GHCR push permissions in nightly release workflow

Author: kateinoigakukun

.github/workflows/build.yml

@@ -60,7 +60,7 @@ jobs:
       - uses: docker/build-push-action@v5
         with:
           context: builders/${{ matrix.entry.target }}
-          push: ${{ github.ref == 'refs/heads/main' || github.ref == 'refs/tags/*' }}
+          push: ${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
 

.github/workflows/release.yml

@@ -39,6 +39,7 @@ jobs:
     permissions:
       contents: write
       id-token: write
+      packages: write
     uses: ./.github/workflows/build.yml
     with:
       publish: true
@@ -50,6 +51,7 @@ jobs:
     permissions:
       contents: write
       id-token: write
+      packages: write
     uses: ./.github/workflows/build.yml
     with:
       publish: true