fix: Include woodpecker RBAC in deploy step

The woodpecker-deployer-rbac.yaml was in kustomization.yaml but
release.sh only applied rdev-api.yaml directly. This caused CI
deploy steps to fail with RBAC forbidden errors.

Now release.sh --deploy applies both manifests.

scripts/release.sh

@@ -149,10 +149,11 @@ if [[ "$DO_DEPLOY" == "true" ]]; then
         echo "  ⚠ No migrations directory found"
     fi
 
-    # Apply manifest
+    # Apply manifests (rdev-api + woodpecker RBAC)
     echo ""
-    echo "📦 Applying deployment manifest..."
+    echo "📦 Applying deployment manifests..."
     kubectl apply -f "$REPO_ROOT/deployments/k8s/base/rdev-api.yaml"
+    kubectl apply -f "$REPO_ROOT/deployments/k8s/base/woodpecker-deployer-rbac.yaml"
 
     # Restart deployment
     echo "🔄 Rolling out new version..."