Apparently we don't need full contents write for the attestations?

Author: masklinn

.github/workflows/release-wheels.yml

@@ -229,8 +229,8 @@ jobs:
     permissions:
       # Use to sign the release artifacts
       id-token: write
-      # Used to upload release artifacts
-      contents: write
+      # necessary to create the artifact storage record.
+      artifact-metadata: write
       # Used to generate artifact attestation
       attestations: write
     environment: release