Pass gha secrets explicitly for release workflow

https://docs.zizmor.sh/audits/#secrets-inherit

Author: jasonkarns

.github/workflows/release.yml

@@ -7,4 +7,5 @@ jobs:
   release:
     permissions: { contents: write, id-token: write }
     uses: nodenv/.github/.github/workflows/release.yml@v7
-    secrets: inherit
+    secrets:
+      BOT_TOKEN: ${{ secrets.BOT_TOKEN }}