ci(release): use RELEASE_TOKEN for the post-release push to main (#1395)

Author: pranav-new-relic

.github/workflows/release.yml

@@ -121,7 +121,11 @@ jobs:
         with:
           ref: main
           fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
+          # RELEASE_TOKEN (PAT) is required because main is protected — rules
+          # forbid direct pushes and require FOSSA to pass. The default
+          # GITHUB_TOKEN cannot bypass those rules. RELEASE_TOKEN is the same
+          # PAT the CLI's OIL→CLI workflow already uses to push tags into OIL.
+          token: ${{ secrets.RELEASE_TOKEN }}
 
       - name: Commit release marker to main
         env: