fix(ci): restrict release bot token permissions

Author: elkaix

.github/workflows/release.yml

@@ -164,6 +164,9 @@ jobs:
         with:
           app-id: ${{ vars.RELEASE_BOT_APP_ID }}
           private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
+          permission-issues: write
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets