Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[adzuci]

Potential fix for https://github.com/apolloio/apollo-io-cli/security/code-scanning/1

Add explicit permissions to .github/workflows/release.yml:

1. Set a restrictive workflow-level default:

   • permissions: { contents: read }
   • This ensures all jobs start with minimal access.

2. Override permissions for the build job, because Create release needs write access:

   • permissions: { contents: write }

3. Keep update-homebrew-tap at read-only default (no extra write to current repo needed), since it uses HOMEBREW_TAP_TOKEN for PR creation in another repository.

This preserves current functionality while enforcing least privilege and satisfying CodeQL.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[orca-security-us]

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Infrastructure as Code	0   0   0   0	View in Orca
Passed	Secrets	0   0   0   0	View in Orca
Passed	Vulnerabilities	0   0   0   0	View in Orca