GITHUB_TOKEN read-only default blocks release provenance upload

The workflow can build and test successfully, but the release job fails when it tries to publish attestations or update release metadata with a narrower token scope.