Move write permissions in `release.yml` to jobs that need the permissions

[emnul]

We can improve the security of our release Github action by moving write permissions to the jobs that need them rather than applying the write permission to all jobs in the workflow. See #19 (comment) for context