release: use GITHUB_TOKEN + contents:write, fail loudly on upload errors

The 4 chip plugin repos didn't have a working ACCESS_TOKEN secret —
gh release create was 401ing. Switch to the auto-provided GITHUB_TOKEN
(with explicit contents:write permission) so no per-repo PAT setup is
needed. Also add curl --fail-with-body so socalabs.com returning a non-2xx
fails the job instead of silently passing.

Author: FigBug

.github/workflows/release.yaml

@@ -67,6 +67,8 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     timeout-minutes: 30
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
       - name: Download Artifacts
@@ -75,5 +77,5 @@ jobs:
         run: ./release.sh
         shell: bash
         env:
-          GH_TOKEN: ${{ secrets.ACCESS_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           APIKEY:   ${{ secrets.APIKEY }}

release.sh

@@ -39,7 +39,7 @@ PLUGIN=rp2a03
 for f in "./Binaries Linux"/*.deb \
          "./Binaries Windows"/*.exe \
          "./Binaries macOS"/*.pkg; do
-  curl -sS -F "files=@${f}" \
+  curl -sS --fail-with-body -F "files=@${f}" \
           -F "plugin=${PLUGIN}" \
           -F "version=${VER}" \
           -F "changelog=${NOTES}" \