Add read permission to build job in release wf

Build job requires read permission to run.

Signed-off-by: Huy Mai <[email protected]>

.github/workflows/release.yaml

@@ -118,6 +118,8 @@ jobs:
         tag_name: ${{ env.RELEASE_TAG }}
 
   build_ipam:
+    permissions:
+      contents: read
     needs: push_release_tags
     name: Build IPAM container image
     if: github.repository == 'metal3-io/ip-address-manager'