Which GitHub Actions permission block setting is required to allow a workflow to write packages to GitHub Packages?