fix(workflows): add pull-requests permission and secrets: inherit to release

The shared plugin-release.yaml reusable workflow declares pull-requests: write
and uses it to create/merge the release PR. Calling workflows must grant all
permissions declared by reusable workflows or the job fails at startup.

Also adds secrets: inherit so org-level RELEASE_APP_ID and RELEASE_APP_PRIVATE_KEY
are forwarded to the external reusable workflow — without this they arrive empty
and the release is silently skipped.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.github/workflows/release.yaml

@@ -10,9 +10,11 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write
 
 jobs:
   release:
     uses: privilegedescalation/.github/.github/workflows/plugin-release.yaml@main
     with:
       version: ${{ inputs.version }}
+    secrets: inherit