ci(release): fix release push authentication

[agcty]

Summary

• switch the release workflow's final git push to an authenticated x-access-token remote
• keeps release commits and tags pushed by the GitHub App token after npm publish succeeds

Verification

• pre-push hook passed: format, affected lint, affected typecheck, affected test, affected build