fix: add pull-requests: read permission to release workflow

[0x46616c6b]

Type of Change

• Bugfix
• Enhancement / new feature
• Refactoring
• Documentation

Description

Follow-up to #59. The reusable release drafter workflow (template_release_drafter.yml) internally requests pull-requests: read to read PR data for generating release notes. Without this permission granted by the caller, the nested job is denied access:

Error calling workflow 'Staffbase/gha-workflows/...template_release_drafter.yml'.
The nested job 'update_release_draft' is requesting 'pull-requests: read',
but is only allowed 'pull-requests: none'.

This adds pull-requests: read to the permissions block in release.yml.

Checklist

• Write tests
• Make sure all tests pass
• Update documentation
• Review the Contributing Guideline and sign CLA
• Reference relevant issue(s) and close them after merging

---

_{The changes and the PR were generated by OpenCode.}