feat: scope PAT-using release/publish jobs to 'release' environment

Author: zdenko-kovac

.github/workflows/release.yaml

@@ -36,6 +36,7 @@ jobs:
   release:
     name: Trigger release
     runs-on: ubuntu-24.04
+    environment: release
     permissions:
       contents: write