build: ensure all files are writable in the tarball