Drop top-level workflow permissions

[erlendellefsen]

release-please.yml and docs.yml declare write permissions at the workflow level and on the jobs. Future jobs added to either file would silently inherit the writes.

Acceptance criteria

• Workflow-level permissions: block removed from release-please.yml
• Workflow-level permissions: block removed from docs.yml
• Each job declares only the permissions it needs (verify the changes job in docs.yml does not need pages: write or id-token: write)
• Workflows still succeed end to end