Remove explicit "-a public-read" from gsutil calls.

They break once we switch to bucket-level permissions and they're unnecessary, because the buckets are public readable anyway, already.

PiperOrigin-RevId: 243990103

scripts/ci/build.sh

diff --git a/scripts/ci/build.sh b/scripts/ci/build.sh
index 1951f0f..c5c526d 100755
--- a/scripts/ci/build.sh
+++ b/scripts/ci/build.sh
@@ -185,7 +185,7 @@
       release_path="${release_name}/rc${rc}"
     fi
     create_index_html "${artifact_dir}" > "${artifact_dir}/index.html"
-    gsutil -m cp -a public-read "${artifact_dir}/**" "gs://bazel/${release_path}"
+    gsutil -m cp "${artifact_dir}/**" "gs://bazel/${release_path}"
   fi
 }
 
@@ -259,7 +259,7 @@
   reprepro -C jdk1.8 includedeb "${distribution}" "${deb_pkg_name}"
   reprepro -C jdk1.8 includedsc "${distribution}" "${deb_dsc_name}"
 
-  gsutil -m cp -a public-read -r dists pool "gs://bazel-apt"
+  gsutil -m cp -r dists pool "gs://bazel-apt"
 }
 
 function release_to_apt() {