Fix: add permissions for release upload

Author: mnemoo

.github/workflows/build-launcher.yml

@@ -4,20 +4,23 @@ on:
   push:
     branches: [main]
     paths:
-      - 'launcher/**'
-      - '.github/workflows/build-launcher.yml'
+      - "launcher/**"
+      - ".github/workflows/build-launcher.yml"
   pull_request:
     branches: [main]
     paths:
-      - 'launcher/**'
+      - "launcher/**"
   workflow_dispatch:
   release:
     types: [created]
 
 env:
-  GO_VERSION: '1.24'
+  GO_VERSION: "1.24"
   APP_NAME: mtools-launcher
 
+permissions:
+  contents: write
+
 jobs:
   # Native builds for maximum compatibility
   build-native:
@@ -146,5 +149,4 @@ jobs:
         uses: softprops/action-gh-release@v1
         with:
           files: artifacts/*
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        if: github.ref_type == 'tag'