fix: add missing permissions to build-changelog-scrubber-lambda job (#3446)

Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: Mpdreamz

.github/workflows/release.yml

@@ -81,6 +81,8 @@ jobs:
       ref: ${{ needs.release-drafter.outputs.tag_name }}
 
   build-changelog-scrubber-lambda:
+    permissions:
+      contents: read
     needs:
       - release-drafter
     uses: ./.github/workflows/build-changelog-scrubber-lambda.yml