chore: scope SDK bot App token permissions

[gjtorikian]

Scopes the SDK bot GitHub App token to the permissions required by release automation.

[greptile-apps]

Greptile Summary

This PR narrows the GitHub App token used by release automation. The main changes are:

• Adds explicit contents: write permission for the generated SDK bot token.
• Adds explicit pull-requests: write permission for the generated SDK bot token.
• Keeps release-please using the scoped token from actions/create-github-app-token.

Confidence Score: 5/5

Safe to merge with minimal risk.

The change is limited to workflow token permission scoping and matches the release automation permissions already required by the job.

No files require special attention.

T-Rex Logs

What T-Rex did

• Verified that the prior release-please workflow version passed the prettier check.
• Verified that the current changed workflow passed the prettier check on the workflow file itself with exit code 0.
• Confirmed that the current workflow includes permission inputs for a scoped GitHub App token.
• Actionlint was attempted but the executable was unavailable, so no syntax diagnostics could be produced.
• Noted that npm run format:check expanded to prettier --check . .github/workflows/release-please.yml and reported unrelated files.

_{Ran code and verified through T-Rex}

Important Files Changed

Filename	Overview
.github/workflows/release-please.yml	Scopes the generated GitHub App token for release-please to contents: write and pull-requests: write; no issues found.

_{Reviews (1): Last reviewed commit: "chore: scope SDK bot App token permissio..." | Re-trigger Greptile}