chore(ci): fix release (#10886)

# Which Problems Are Solved

The new pipeline did not correctly build the release. Console was not
built into the binary. Also there were some pipeline permission errors.

# How the Problems Are Solved

- add `build-console` as dependency to pack binaries
- streamline permissions and only pass necessary into steps

# Additional Changes

none

# Additional Context

- relates to #10571

.github/workflows/pack.yml

@@ -26,9 +26,6 @@ on:
         description: 'base64 endcrypted key to connect to Google'
         required: true
 
-permissions:
-  packages: write
-
 env:
   default_labels: |
     org.opencontainers.image.documentation=https://zitadel.com/docs
@@ -37,6 +34,8 @@ env:
 jobs:
   version:
     uses: ./.github/workflows/version.yml
+    permissions:
+      contents: write
     with:
       semantic_version: ${{ inputs.semantic_version }}
       dry_run: true
@@ -46,6 +45,9 @@ jobs:
       group: zitadel-public
     environment: ${{ github.ref_protected == 'true' && 'Protected' || null }}
     needs: version
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4