Update release GitHub action in the following ways:

• Adding missing id-token permission.
• Correcting path to CHANGELOG.
• Not run automatically on push to main. The reason I changed this is because this way we can choose when to release a stable, in case we want to bundle multiple features / fixes. Releases are still running automatically for non-stable branches.