push-to-winget: permissions: write-all

I doubt that it will work...
see: microsoft/winget-create#470

Maybe we need classical github-token see:
pulumi/pulumi-winget#22 (comment)

.github/workflows/publish-to-other-than-github.yaml

@@ -125,6 +125,7 @@ jobs:
     name: Update Winget
     if: github.event.client_payload.push-to-winget && github.event.client_payload.version != ''
     runs-on: windows-latest
+    permissions: write-all
     steps:
     - name: Ensure proper version
       run: |
@@ -150,6 +151,7 @@ jobs:
           https://github.com/open-component-model/ocm/releases/download/v${{ env.RELEASE_VERSION }}/ocm-${{ env.RELEASE_VERSION }}-windows-arm64.zip `
           --version ${{ env.RELEASE_VERSION }} `
           Open-Component-Model.ocm-cli
+
   push-to-website:
     name: Update OCM Website
     runs-on: ubuntu-latest
@@ -163,4 +165,4 @@ jobs:
         token: ${{ steps.generate_token.outputs.token }}
         repository: open-component-model/ocm-website
         event-type: ocm-cli-release
-        client-payload: '{"tag": "${{ env.RELEASE_VERSION }}"}'
+        client-payload: '{"tag": "${{ env.RELEASE_VERSION }}"}'