fix(ci): grant contents write permission for beachball publish push

When `id-token: write` was added for trusted npm publishing (OIDC),
specifying `permissions` at the job level overrides all defaults.
`contents` dropped from `write` to `read`, breaking beachball's
`git push` after publish.

Also syncs package version to 1.5.3 (already published) and removes
the 3 consumed changefiles.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: frantic1048

.github/workflows/ci.yml

@@ -79,7 +79,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       id-token: write
-      contents: read
+      contents: write
     steps:
       - uses: actions/checkout@v6
       - uses: pnpm/action-setup@v4

change/@rightcapital-php-parser-1068307e-5498-45b9-9264-73094ec2aef9.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightcapital/php-parser",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "description": "TypeScript types for PHP Parser JSON representation",
   "keywords": [
     "PHP",