fix: persisting a temporary token with fewer privileges (#274)

[DX-191](https://jira.tid.es/browse/DX-191)

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: Yermanaco

.github/workflows/release.yml

@@ -24,6 +24,8 @@ jobs:
         environment: production
         steps:
             - uses: actions/checkout@v6
+              with:
+                  persist-credentials: false
 
             # Do NOT set registry-url here: it writes an .npmrc that conflicts
             # with semantic-release's OIDC authentication.