docs(ci): document release app actions permission for downstream dispatch

[c-vigo]

Description

Document the missing RELEASE_APP permission needed by downstream smoke-test orchestration after issue #397 RCA. This updates release-cycle documentation and changelog entries so the required Actions write scope is explicit for workflow dispatch operations.

Type of Change

• feat -- New feature
• fix -- Bug fix
• docs -- Documentation only
• chore -- Maintenance task (deps, config, etc.)
• refactor -- Code restructuring (no behavior change)
• test -- Adding or updating tests
• ci -- CI/CD pipeline changes
• build -- Build system or dependency changes
• revert -- Reverts a previous commit
• style -- Code style (formatting, whitespace)

Modifiers

• Breaking change (!) -- This change breaks backward compatibility

Changes Made

• docs/RELEASE_CYCLE.md
  • Added Actions read/write to RELEASE_APP permission requirements
  • Clarified downstream validation repository requirements for repository_dispatch and workflow dispatch orchestration
• CHANGELOG.md
  • Added a Fixed entry for issue #397 documenting the permission requirement correction
• assets/workspace/.devcontainer/CHANGELOG.md
  • Synced changelog mirror via manifest hook to keep workspace template aligned

Changelog Entry

Fixed

• Release app permission docs now include downstream workflow dispatch requirements (#397)
  • Update docs/RELEASE_CYCLE.md to require Actions read/write for RELEASE_APP on the validation repository
  • Clarify this is required so downstream repository-dispatch.yml can trigger release orchestration workflows via workflow_dispatch

Testing

• Tests pass locally (just test)
• Manual testing performed (describe below)

Manual Testing Details

• Confirmed issue RCA evidence in failing run 23339858643 (HTTP 403: Resource not accessible by integration on workflow dispatch)
• Verified docs update and changelog updates committed cleanly with pre-commit hooks passing

Checklist

• My code follows the project's style guidelines
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have updated the documentation accordingly (edit docs/templates/, then run just docs)
• I have updated CHANGELOG.md in the [Unreleased] section (and pasted the entry above)
• My changes generate no new warnings or errors
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published

Additional Notes

N/A

Refs: #397