fix: add pull-requests: read permission to release workflow

The reusable release drafter workflow requests pull-requests: read
internally to read PR data for generating release notes. Without this
permission in the caller, the nested job is denied access.

Co-Authored-By: OpenCode <noreply@opencode.ai>

Author: 0x46616c6b

.github/workflows/release.yml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: write
+  pull-requests: read
 
 jobs:
   update_release_draft: