fix: add git credentials for tag push in release workflow

The 'Push tag' step was failing with 'fatal: could not read Username for
https://github.com: No such device or address' because persist-credentials: false
on the checkout step removes the ephemeral GITHUB_TOKEN credential from .git/config.

Re-establish git authentication by setting the remote URL with a token before
git pull/tag/push. This maintains supply-chain security (keeps the token window
minimal, only during the push step) while fixing the credential gap.

Fixes release workflow failures when inputs.dev == false (production releases).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: cx-atish-jadhav

.github/workflows/release.yml

@@ -185,7 +185,10 @@ jobs:
 
       - name: Push tag
         if: inputs.dev == false
+        env:
+          REPO: ${{ github.repository }}
         run: |
+          git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${REPO}"
           git pull
           git tag "$TAG_NAME"
           git push --tags