Grant packages write permissions to k8s-content workflow

[yuumasato]

Description:

• Grant contents: read permission to k8s-content action
• Grant packages: write permission to k8s-content action

Rationale:

• The workflow needs permission to publish packages.
• Fixes Kubernetes content workflow is failing to run due to invalid workflow #10746

Review Hints:

• Check the job logs:
  https://github.com/ComplianceAsCode/content/actions/workflows/k8s-content.yaml

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[yuumasato]

I had to grant even contents: read, 🤔

It seems that the repo is creating GITHUB_TOKENs with permissions stricter than the default restricted.
https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token

[yuumasato]

@ggbecker The job ran, but it failed on push to repo. Very likely because it ran on "pull request" from my fork.
https://github.com/ComplianceAsCode/content/actions/runs/5953290199

I have updated the PR.

[ggbecker]

@ggbecker The job ran, but it failed on push to repo. Very likely because it ran on "pull request" from my fork. https://github.com/ComplianceAsCode/content/actions/runs/5953290199

I have updated the PR.

Okay, let's merge whenever the CI finishes.

[codeclimate]

Code Climate has analyzed commit 89ddeda and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 53.3% (0.0% change).

View more on Code Climate.