[bug] Don't use `package: write` permissions for container workflow

Using `package: write` on the workflow is convenient but is not setting least privilege in the case where users are not using ghcr.io. We should force users to set the username and password and log into ghcr.io manually.

Related to #547 