ci: fix main workflow failures

[jrandolf]

Summary

• remove the Cargo cache step that reports hidden filesystem errors while still returning success
• use the workflow token already granted contents: write and pull-requests: write instead of the broken release secret

Verification

• mise exec -- hk check --all --slow
• prior full workspace, WASM, package, proto, and PostgreSQL end-to-end gates remain unchanged