ci: enhance GitHub release workflow with token handling and file upload improvements

.github/workflows/release.yml

@@ -5,6 +5,9 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: write
+
 jobs:
   detect-provider:
     runs-on: ubuntu-latest
@@ -23,8 +26,12 @@ jobs:
 
   github-release:
     needs: detect-provider
+    permissions:
+      contents: write
     if: needs.detect-provider.outputs.provider == 'github'
     uses: ./.github/workflows/github-release.yml
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   gitea-release:
     needs: detect-provider