Add workflow to update the release branch.

[ericonr]

Since we are allowing the CI to write to branches, CI runs from external users have to be approved.