ci: add workflow permissions

[petar-omni]

Added

Description of new functionality, feature, or content that has been added in this pull request.

Changed

Description of the modifications made to existing functionality, feature, or content in this pull request. This could include changes to code, CI, documentation, etc.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 4eba09f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
staging-widget	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 22, 2025 1:11pm
stakekit-widget	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 22, 2025 1:11pm

[Copilot]

Pull Request Overview

This PR adds explicit GitHub Actions permissions for the release and CI workflows to tighten scope of the GITHUB_TOKEN.

• Grants pull-requests: write and contents: write to the release job
• Grants contents: read to the CI job

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/release.yml	Added permissions block with pull-requests and contents write scopes for the release job
.github/workflows/ci.yml	Added permissions block with contents: read for the CI job

Comments suppressed due to low confidence (1)

.github/workflows/ci.yml:17

• [nitpick] The explicit contents: read permission is redundant since GITHUB_TOKEN has read access to contents by default when no permissions block is specified. You can remove this block to simplify the workflow.

permissions: