Update GitHub Actions workflow permissions (#416)

Added permissions for contents and packages.

.github/workflows/build-and-publish-docker-image.yml

@@ -81,6 +81,9 @@ jobs:
     needs: build-and-push-images
     runs-on: ubuntu-latest
     if: github.event_name != 'pull_request'
+    permissions:
+      contents: read
+      packages: write
     env:
       # Legacy name for backwards compatibility (hardcoded so it works after rename)
       LEGACY_NAME: calibre-web-automated-book-downloader
@@ -138,4 +141,4 @@ jobs:
           create_alias "${STANDARD}" "${LEGACY_TOR}"
 
           # calibre-web-automated-book-downloader-extbp → lite image
-          create_alias "${LITE}" "${LEGACY_EXTBP}"
+          create_alias "${LITE}" "${LEGACY_EXTBP}"