chore: fix job permissions; make format depend on build

Author: vladcheck

.github/workflows/maven.yml

@@ -6,11 +6,11 @@ on:
   pull_request:
     branches: [ "main" ]
 
-permissions:
-  contents: write
 
 jobs:
   build:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
@@ -30,6 +30,7 @@ jobs:
         maven-args: "-DmergeClassifiers=true"
 
   format:
+    needs: build
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4