chore: give pr pipeline release read permissions (#304929)

The core-ci task requires reading some companion extension releases. This PR modifies the permissions to allow the build to read those releases.