CI: acquire permissions for release uploads

Signed-off-by: Stephen Gutekanst <stephen@sourcegraph.com>

Author: Stephen Gutekanst

.github/workflows/ci.yml

@@ -8,6 +8,8 @@ jobs:
     # We want to run on external PRs, but not on our own internal PRs as they'll be run by the push
     # to the branch.
     if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository
+    permissions:
+      contents: write # for release creation
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -36,4 +38,4 @@ jobs:
           gh release upload "release-$RELEASE_COMMIT" out/doctree-x86_64-windows.exe
         env:
           RELEASE_COMMIT: ${{steps.recorded_release_version.outputs.commit}}
-          GITHUB_TOKEN: ${{ secrets.GH_PROJECTS_ACTION_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}