fix: Grant permissions to bump workflow caller

Author: zharinov

.github/workflows/bump.yml

@@ -32,7 +32,10 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Install tomato-toml
-        run: cargo install tomato-toml --locked
+        uses: baptiste0928/cargo-install@b687c656bda5733207e629b50a22bf68974a0305 # v3.3.2
+        with:
+          crate: tomato-toml
+          locked: true
 
       - name: Calculate next version
         id: version

.github/workflows/release.yml

@@ -56,3 +56,6 @@ jobs:
       bump: patch
     secrets:
       PLOTNIK_PAT: ${{ secrets.PLOTNIK_PAT }}
+    permissions:
+      contents: write
+      pull-requests: write