Promote staging -> main (Release permission fix)

[0xPlayerOne]

Grants the caller wrapper id-token: write, which the reusable release runtime requires for npm trusted publishing and which GitHub validates before starting the workflow.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 file)

• .github/workflows/release.yml - Adds id-token: write permission for npm trusted publishing via OIDC.

---

_{Reviewed by step-3.7-flash · Input: 32.1K · Output: 2.8K · Cached: 175.1K}