ci: fix publish-github-releases to skip on PRs

- Add if condition to only run on push/workflow_dispatch events
- Add permissions block with contents: write for release creation
- Prevents failures when release.yml runs on PR events

Note: This work was completed with AI assistance (Claude Code).

Author: oberstet

.github/workflows/release.yml

@@ -151,7 +151,11 @@ jobs:
     needs: [build-package, build-docs]
     runs-on: ubuntu-latest
 
-    # Publish to GitHub Releases when merged to master
+    # Publish to GitHub Releases when merged to master (NOT on PRs)
+    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
+
+    permissions:
+      contents: write  # Required for creating releases
 
     steps:
       - name: Download build artifacts