fix(ci): grant security-events: write to release workflow

The security reusable workflow's secrets job requests
security-events: write to upload the betterleaks SARIF report.
When called from release.yml, GitHub intersects caller and callee
permissions and uses the most restrictive; release.yml only declared
contents: read, so the SARIF permission was dropped to none and the
workflow failed at startup before any job ran.

Add security-events: write to the release.yml workflow-level
permissions block so the reusable security workflow can run end
to end on tag pushes.

Author: jvm

.github/workflows/release.yml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: read
+  security-events: write
 
 jobs:
   security: