Fix release.yml: remove persist-credentials that breaks git-auto-commit

[adamtheturtle]

Summary

• Remove persist-credentials: false from release.yml as it breaks stefanzweifel/git-auto-commit-action@v7 which needs credentials to push
• Add artipacked to disabled rules in zizmor.yml to suppress the warning

Context

The previous zizmor PR added persist-credentials: false to all workflow files including release.yml. However, this breaks the release workflow because git-auto-commit-action needs credentials to push the changelog update.

Test plan

• CI passes
• Release workflow will work correctly with credentials preserved

---

Note

Fixes the release pipeline to allow automated commits and tagging, and suppresses a new linter warning.

• Release workflow: In release.yml, removed persist-credentials: false from actions/checkout@v6 so stefanzweifel/git-auto-commit-action@v7 can push changes; kept token and fetch-depth: 0 settings.
• Zizmor config: In zizmor.yml, disabled artipacked rule to silence warnings.

^{Written by Cursor Bugbot for commit eab688d. This will update automatically on new commits. Configure here.}