fix: add explicit permissions to release workflow

Adds 'permissions: contents: read' to limit GITHUB_TOKEN permissions
following security best practices. The workflow uses a GitHub App token
for privileged operations, so limiting the default token to read-only
is appropriate.

Author: vaind

.github/workflows/release.yml

@@ -1,5 +1,8 @@
 name: Release
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
     inputs: