fix release workflows

.github/workflows/cmake.yml

   build:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+
     steps:
       - name: Install dependencies
         run: sudo apt-get install -y cxxtest build-essential gcc-arm-none-eabi mtools zip
         if: startsWith(github.ref, 'refs/tags/')
         run: |
           cd ${{github.workspace}}/repo/build
-          zip -r picowota_gadget.uf2 gadget.elf firmware
+          zip -r firmware picowota_gadget.uf2 gadget.elf
 
       - name: Upload release files
         if: startsWith(github.ref, 'refs/tags/')

.github/workflows/scad.yml

   render:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4