ci: allow release workflow to dispatch landing deploy

[jb-thery]

Summary

• grant the release workflow Actions write permission so it can dispatch the landing deployment after resolving the released version

Context

• Release npm published 2.4.0 successfully, but the post-release landing dispatch failed with 403 because the workflow token lacked actions: write
• This keeps the existing versioned landing redeploy path working for future releases

Validation

• git diff --check
• pnpm lint
• local YAML parse for .github/workflows/npm-publish.yml
• GitNexus detect-changes --repo jcode-ragmir returned no indexed symbol changes