test: probe api permissions (temporary)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Author: taraxvoid

.github/workflows/release-please.yml

@@ -39,6 +39,18 @@ jobs:
           client-id: ${{ secrets.RELEASE_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RELEASE_BOT_APP_PRIVATE_KEY }}
 
+      - name: Probe
+        continue-on-error: true
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          echo "== draft release"
+          gh api -i -X POST repos/${{ github.repository }}/releases -f tag_name=zz-probe -f target_commitish=main -F draft=true | grep -iE '^(HTTP|x-accepted|x-github-media|\{)' || true
+          echo "== tag ref at de1ef5f"
+          gh api -i -X POST repos/${{ github.repository }}/git/refs -f ref=refs/tags/zz-probe-tag -f sha=de1ef5f5b708e081eed2344f6f2930341ee0be90 | grep -iE '^(HTTP|x-accepted|\{)' || true
+          echo "== tag ref at older commit"
+          gh api -i -X POST repos/${{ github.repository }}/git/refs -f ref=refs/tags/zz-probe-tag2 -f sha=bb1dabf46b35bd28ac42a11d0bc0c42a40972a2f | grep -iE '^(HTTP|x-accepted|\{)' || true
+
       - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         id: release
         with: