fix: workflow permissions

Author: edisile

.github/workflows/deploy.yaml

@@ -63,7 +63,11 @@ jobs:
     # we will dispatch another copy of this workflow to deploy the Staging API env; we invoke the workflow
     # with an input, so `github.event.inputs.environment` won't be "" and the `if` condition above will be
     # false, thus there won't be a recursive loop
-    uses: canonical/snapcraft.io/.github/workflows/deploy.yaml@main
+    uses: ./.github/workflows/deploy.yaml
+    permissions:
+      contents: read
+      deployments: write
+      packages: write
     with:
       environment: Staging API
     secrets: