chore: more oopsies in release.yml (#1041)

<!-- ELLIPSIS_HIDDEN -->



> [!IMPORTANT]
> Added branch-specific trigger and set permissions in `release.yml`.
> 
>   - **Workflow Triggers**:
> - Added `branches: [sam/fix-release]` to `push` trigger in
`release.yml`.
>   - **Permissions**:
>     - Set `contents: read` and `id-token: write` in `release.yml`.
> 
> <sup>This description was created by </sup>[<img alt="Ellipsis"
src="https://img.shields.io/badge/Ellipsis-blue?color=175173">](https://www.ellipsis.dev?ref=BoundaryML%2Fbaml&utm_source=github&utm_medium=referral)<sup>
for dfffac6. It will automatically
update as commits are pushed.</sup>

<!-- ELLIPSIS_HIDDEN -->

.github/workflows/release.yml

@@ -14,6 +14,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   build-wasm:
     runs-on: ubuntu-latest