chore: add approval reqs to release workflows (#1243)

<!-- ELLIPSIS_HIDDEN -->



> [!IMPORTANT]
> Add approval requirement to `publish-to-github`,
`publish-to-open-vsx`, and `publish-to-vscode-marketplace` jobs in
`release.yml`.
> 
>   - **Workflows**:
> - Add `environment: release` to `publish-to-github`,
`publish-to-open-vsx`, and `publish-to-vscode-marketplace` jobs in
`release.yml` to require approval before execution.
> 
> <sup>This description was created by </sup>[<img alt="Ellipsis"
src="https://img.shields.io/badge/Ellipsis-blue?color=175173">](https://www.ellipsis.dev?ref=BoundaryML%2Fbaml&utm_source=github&utm_medium=referral)<sup>
for daea535. It will automatically
update as commits are pushed.</sup>

<!-- ELLIPSIS_HIDDEN -->

.github/workflows/release.yml

@@ -164,6 +164,7 @@ jobs:
           done
 
   publish-to-github:
+    environment: release
     needs: [all-builds]
     if: ${{ startsWith(github.ref, 'refs/tags/') }}
     runs-on: ubuntu-latest
@@ -181,6 +182,7 @@ jobs:
           body: ${{steps.latest_release.outputs.changelog}}
 
   publish-to-open-vsx:
+    environment: release
     needs: [all-builds]
     runs-on: ubuntu-latest
     if: ${{ startsWith(github.ref, 'refs/tags/') || inputs.force_publish_vscode }}
@@ -202,6 +204,7 @@ jobs:
           OVSX_PAT: ${{ secrets.OVSX_PAT }}
 
   publish-to-vscode-marketplace:
+    environment: release
     needs: [all-builds]
     runs-on: ubuntu-latest
     if: ${{ startsWith(github.ref, 'refs/tags/') || inputs.force_publish_vscode }}