ci: migrate release workflow to changesets/action v2 and Changesets CLI v3

[MattiasBuelens]

Summary

#179 bumped changesets/action to 2.1.1, but the release workflow still used the v1 inputs and the repo still used Changesets CLI v2. The first release run after the bump failed with:

This version of the Changesets action is designed to work with Changesets CLI v3. Changesets CLI v2 is not supported; use Changesets action v1 instead, which is compatible with CLI v2.

This PR makes the workflow compatible with action v2:

release.yml

• The GITHUB_TOKEN env var is no longer read by the action. The app token is now passed through the github-token input. Without it, the action falls back to github.token and the release commits/PR are not attributed to theoplayer-bot.
• Renamed inputs: commit → commit-message, title → pr-title, version → version-script, publish → publish-script, createGithubReleases → create-github-releases.
• Fixed the # v1 version comment on the pinned SHA to # v2.1.1. Dependabot only rewrites this comment when it ends with a tag that points to the old SHA; changesets/action publishes no major tags (v1, v2), so # v1 was never updated.

Changesets CLI v3

• @changesets/cli ^2.31.0 → ^3.0.1, @changesets/types ^6.1.0 → ^7.0.0, config $schema → @changesets/config@4.0.0.
• No other config changes were needed. The custom .changeset/format.mjs changelog module and post-process.mjs still work: npm run changeset:version locally bumps both fixed packages to 2.3.3 and produces the expected ### 🐛 Issues / ### 📦 Dependency Updates sections.
• CLI v3 requires Node ^22.11 and npm >=10.9; the workflow already uses Node 22 and npm 11.

Note: action v2 pushes release commits and tags through the GitHub API by default (signed, attributed to the app that owns github-token), so the "Configure Git user" step is no longer needed for the release commit. It is left in place as it is harmless.

Link to Devin session: https://dolby.devinenterprise.com/sessions/09ce8fec2c0c42ea89616f48717fb546
Open in Devin Desktop: https://dolby.devinenterprise.com/desktop/session/09ce8fec2c0c42ea89616f48717fb546?variant=devin
Requested by: @MattiasBuelens

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring

[changeset-bot]

⚠️ No Changeset found

Latest commit: cc4c30b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR