feat: scope PAT-using release/publish jobs to 'release' environment

Author: zdenko-kovac

.github/workflows/publish.yaml

@@ -85,6 +85,7 @@ jobs:
   update-chart:
     name: Update Helm chart
     runs-on: ubuntu-24.04
+    environment: release
     needs: [publish-docker]
 
     steps:

.github/workflows/release.yaml

@@ -36,6 +36,7 @@ jobs:
   release:
     name: Trigger release
     runs-on: ubuntu-24.04
+    environment: release
     permissions:
       contents: write