adapt to stricter repo permissions part 3

.github/workflows/publish.yaml

@@ -56,6 +56,9 @@ jobs:
           path: "./element-call-*.tar.gz"
   publish_docker:
     needs: publish_tarball
+    permissions:
+      contents: write
+      packages: write
     uses: ./.github/workflows/docker.yaml
     with:
       docker_tags: |