repair release workflow syntax

[lancekrogers]

Summary

• remove the invalid empty top-level permissions key from the release workflow
• restore a valid tag-triggered release workflow on main

Validation

• workflow file diff reviewed locally

Note

• there are still no v* tags on the repo, so merging this fixes the workflow file but does not publish a release until a tag is pushed