feat!: [INFRA-649] Major release on breaking API changes

[alexs-aero]

Summary

Major release since v3.8.0. Most consumer updates are permission grants or pipeline behavior adjustments — no input renames. Review the caller setup that matches your repo and apply the corresponding change before upgrading.

Client-side API changes

Permissions (most common)

Your setup	Action
Composable reusable_deploy-artifacts with Maven metadata (default gh-upload-bundle-metadata: true)	Add actions: write to the top-level caller workflow
Orchestrated reusable_artifacts-cicd with Maven/JAR artifacts	Add actions: write to the top-level caller workflow
Deploy → reusable_create-release-bundle via gh-bundle-metadata-artifact-name	Add actions: write and actions: read
Composable deploy, metadata not needed	No permission change — set gh-upload-bundle-metadata: false

Minimal caller permissions when metadata handoff is required:

permissions:
  contents: read
  id-token: write
  actions: write   # deploy metadata upload
  actions: read    # create-release-bundle metadata download