add required permissions & prevent release before build

Author: lstreckeisen

.github/workflows/release.yml

@@ -5,13 +5,19 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: read
+  actions: read
+  checks: write
+
 jobs:
   release-build:
     uses: ./.github/workflows/build.yml
     secrets: inherit
 
   release:
     runs-on: ubuntu-latest
+    needs: release-build
     steps:
       - name: Download plugin artifact
         uses: actions/download-artifact@v4