Update release workflow for npm token changes

[jonrohan]

https://github.com/github/primer/issues/6015

Screenshots

Please provide before/after screenshots for any visual changes

Merge checklist

• Added/updated colors
• Added/updated documentation/README
• Tested in GitHub Light Default theme

Take a look at the Contribute section for more information on how test your changes locally.

[changeset-bot]

⚠️ No Changeset found

Latest commit: c2e0b25

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

Colors changed

No colors changed

[Copilot]

Pull Request Overview

This PR updates the GitHub Actions release workflow with improved security, modern tooling, and concurrency controls. The changes modernize the CI/CD pipeline while addressing security best practices.

• Adds concurrency controls to prevent parallel workflow runs
• Updates Node.js and GitHub Actions versions to latest major releases
• Adds granular permissions following least-privilege principle

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.