fix(release): promote attestation permissions to alpha

[dongkeren]

Summary

• merge the validated dev release permission fix into alpha through an up-to-date promotion branch
• retain both protected branch histories without writing directly to dev or using admin bypass
• produce the exact four-platform release-candidate set for 22.22.3-kf.5-alpha.2

Evidence

• dev fix merged in fix(release): propagate attestation permissions #145 at 4516ff3a128e01845c81b346074f89e4131127bd
• predecessor fix(release): promote attestation permissions to alpha #146 run 30248380195 attempt 2 passed Linux x64, Linux ARM64, macOS ARM64, and Windows x64
• promotion merge commit is signed off and includes current alpha ancestry

[kungfu-origin]

CODEOWNER review: the promotion branch is based on current alpha, merges the already-validated dev fix, preserves protected ancestry, and is signed off.