ci: align release app token usage (#82)

## Summary
- remove the ineffective `owner` / `repositories` inputs from the
release GitHub App token step
- match the same-repo GitHub App token usage used in `oxc-project/oxc`
and `oxc-project/unicode-id-start`
- add `workflow_dispatch` so the release workflow can be manually
retested after the GitHub App installation is fixed

## Why
The failed run still reached `GET /repos/rolldown/notify/installation`
and returned 404 even with `owner` and `repositories` set. The Oxc
workflows use plain `client-id` + `private-key` for same-repo tokens;
the remaining issue is the GitHub App installation or
selected-repository access for `rolldown/notify`, not workflow token
scoping.

## Verification
- `ruby -e 'require "yaml";
YAML.load_file(".github/workflows/release.yml"); puts "ok"'`
- `git diff --check -- .github/workflows/release.yml`

Author: Boshen

.github/workflows/release.yml

@@ -3,6 +3,7 @@ name: Release
 permissions: {}
 
 on:
+  workflow_dispatch:
   push:
     branches:
       - main
@@ -21,10 +22,6 @@ jobs:
         with:
           client-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
-          owner: ${{ github.repository_owner }}
-          repositories: ${{ github.event.repository.name }}
-          permission-contents: write
-          permission-pull-requests: write
 
       - uses: oxc-project/release-plz@e2b12f55ad64a22af8e93634b94439c42913afca # v1.0.6
         with: