Align release/CI workflows with plurimath-ci secrets and trusted publishing

[suleman-uzair]

This PR:

• add contents: write and id-token: write permissions to the release job so the reusable RubyGems workflow can use OIDC trusted publishing
• switch the release secrets from METANORMA_CI_RUBYGEMS_API_KEY/METANORMA_CI_PAT_TOKEN to PLURIMATH_CI_RUBYGEMS_API_KEY/PLURIMATH_CI_PAT_TOKEN
• pass PLURIMATH_CI_PAT_TOKEN in the rake workflow in place of METANORMA_CI_PAT_TOKEN
• align the next_version input description with the current Cimas template

[Copilot]

Pull request overview

This PR updates the repository’s GitHub Actions workflows to match the Plurimath CI secret names and enables OIDC trusted publishing support for the RubyGems release reusable workflow.

Changes:

• Add contents: write and id-token: write permissions to the release job for trusted publishing via OIDC.
• Switch release workflow secrets from METANORMA_CI_* to PLURIMATH_CI_*.
• Update the rake workflow to use PLURIMATH_CI_PAT_TOKEN.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/release.yml	Updates release job permissions for OIDC and switches RubyGems/PAT secrets to PLURIMATH_CI_*; adjusts next_version input description.
.github/workflows/rake.yml	Switches pat_token secret to PLURIMATH_CI_PAT_TOKEN for the reusable rake workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.