Update permission for pipedv1 build and publish workflow

[khanhtc1202]

What this PR does:

SSIA

Why we need it:

Fix the failed workflow https://github.com/pipe-cd/pipecd/actions/runs/18613808558/job/53075667934

Which issue(s) this PR fixes:

Fixes #

Does this PR introduce a user-facing change?:

• How are users affected by this change:
• Is this breaking change:
• How to migrate (if breaking change):

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 28.83%. Comparing base (41fdb75) to head (c88c308).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #6322      +/-   ##
==========================================
- Coverage   28.83%   28.83%   -0.01%     
==========================================
  Files         560      556       -4     
  Lines       59899    59787     -112     
==========================================
- Hits        17273    17239      -34     
+ Misses      41304    41227      -77     
+ Partials     1322     1321       -1     

Flag	Coverage Δ
.	23.29% <ø> (ø)
.-pkg-app-pipedv1-plugin-analysis	32.64% <ø> (ø)
.-pkg-app-pipedv1-plugin-kubernetes	58.54% <ø> (ø)
.-pkg-app-pipedv1-plugin-kubernetes_multicluster	67.63% <ø> (ø)
.-pkg-app-pipedv1-plugin-scriptrun	54.83% <ø> (ø)
.-pkg-app-pipedv1-plugin-terraform	38.65% <ø> (ø)
.-pkg-app-pipedv1-plugin-wait	?
.-pkg-app-pipedv1-plugin-waitapproval	52.71% <ø> (ø)
.-pkg-plugin-sdk	50.34% <ø> (+0.19%)	⬆️
.-tool-actions-gh-release	19.23% <ø> (ø)
.-tool-actions-plan-preview	25.51% <ø> (ø)
.-tool-codegen-protoc-gen-auth	0.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Warashi]

LGTM 👍