release: promote release workflow permission fix

[jb-thery]

Summary

• promote the release-workflow permission fix from develop to main
• keeps future npm releases able to dispatch the versioned landing redeploy after semantic-release resolves the version

Validation

• PR ci: allow release workflow to dispatch landing deploy #55 checks passed
• develop CI and CodeQL passed after merge

Release impact

• no package release is expected from this ci-only change
• the existing npm 2.4.0 release and landing deployment remain the production payload