needs permission-contents for zizmor

not sure where pull request permissions came from, app doesn't have that, so it fails

Author: minrk

.github/workflows/publish-changelog.yml

@@ -25,7 +25,6 @@ jobs:
           app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
           permission-contents: write
-          permission-pull-requests: write
 
       - name: Publish changelog
         id: publish-changelog

.github/workflows/publish-release.yml

@@ -29,6 +29,7 @@ jobs:
         with:
           client-id: ${{ vars.APP_CLIENT_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
+          permission-contents: write
 
       - name: Populate Release
         id: populate-release