fix(release): grant actions:read so preflight can see pr.yml

[antosubash]

Summary

• The latest release run (24779237370) failed in preflight with a 5-minute timeout waiting for pr.yml, even though pr.yml on the same commit had already completed green at 12:53:34Z.
• Root cause: the workflow-level permissions: block listed only contents: write and id-token: write. Specifying any scope implicitly sets every other scope to none, so actions was none, gh run list returned empty, and 2>/dev/null || true swallowed the underlying error. The poll loop never saw completed.
• Fix: add actions: read to the permissions block, and drop 2>/dev/null so future gh errors are visible in the log.

Test plan

• Merge and re-dispatch release against main (testpypi target) once pr.yml is green — preflight should now detect the green run and advance to build.