rw perms in manifest (#136)

* run only in PR

* use dedicated builds (smh)

* manifest

* add platform tags temporarily

* remove unneeded newline

* rw perms

* temporarily run on my branch

* remove temp branch

Author: jackjohn7

.github/workflows/main.yml

@@ -51,6 +51,9 @@ jobs:
     manifest:
         needs: push-containers
         runs-on: ubuntu-24.04
+        permissions:
+            contents: read
+            packages: write
         steps:
             - name: Log in to GHCR
               uses: docker/login-action@v3