Fix permissions for release workflow

[MrAlias]

Example failure this is addressing: https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation/actions/runs/21911461531

[Copilot]

Pull request overview

Adjusts the Release GitHub Actions workflow to explicitly grant the minimum required GITHUB_TOKEN permissions on jobs that call reusable workflows, fixing failures caused by the workflow-level permissions: {} setting.

Changes:

• Add per-job permissions to test jobs that invoke reusable workflows so they can publish checks / PR annotations and upload artifacts where needed.
• Add per-job permissions to docker build/publish jobs to allow OIDC (id-token: write) and package publishing (packages: write) while keeping contents: read.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 44.21%. Comparing base (d12e161) to head (088a815).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff             @@
##             main    #1284       +/-   ##
===========================================
+ Coverage   19.36%   44.21%   +24.85%     
===========================================
  Files         239      304       +65     
  Lines       27944    27713      -231     
===========================================
+ Hits         5411    12254     +6843     
+ Misses      21901    14728     -7173     
- Partials      632      731       +99     

Flag	Coverage Δ
integration-test	?
integration-test-arm	?
k8s-integration-test	?
oats-test	?
unittests	44.21% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[grcevski]

LGTM!