Fix GitHub release creation token parameter

- Change from env.GITHUB_TOKEN to token parameter (correct for action-gh-release)
- Add pull-requests: read permission
- Update permissions comment for clarity

Author: gamma

.github/workflows/release.yml

@@ -12,8 +12,9 @@ jobs:
     runs-on: ubuntu-latest
 
     permissions:
-      contents: write  # Required to create releases
+      contents: write  # Required to create releases and push tags
       id-token: write  # Required for OIDC if using
+      pull-requests: read  # May be needed for some operations
 
     steps:
       - name: Checkout code
@@ -157,6 +158,5 @@ jobs:
             **Full Changelog**: https://github.com/${{ github.repository }}/compare/${{ github.event.before }}...${{ github.ref }}
           draft: false
           prerelease: false
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}