chore: add workflow permissions to build pipeline

Restrict GitHub Actions workflow permissions to minimum
required privileges. Add read permission to build job and
write permission to release job for creating releases.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: Amygos

.github/workflows/build.yml

@@ -3,6 +3,9 @@ name: Build and release Falconieri
 on:
   push:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -25,6 +28,8 @@ jobs:
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/')
     needs: build
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v6
       - uses: actions/download-artifact@v8.0.1