chore: publish 1.x through the Sonatype Central Portal

[ckawl]

main moved from Nexus 2 to the Central Portal in #1592. Nexus 2 is retired, and once a namespace has moved to the Central Portal it must not go back to OSSRH, so the 1.x release workflow cannot be used as it is.

This brings 1.x in line with main:

• release.yml is main's, except it keeps java-version 8 for the 1.x line. That also adds the permissions block main and 2.1.x already have: the repository's default token is now read-only, so without contents: write the release could not push its commits and tag
• pom.xml repositories and distributionManagement point at the OSSRH Staging API, as on main
• the archetype poms get a . Maven does not inherit name from the parent and the Central Portal rejects a deployment without one, which is what main hit in 730906a

Issue #, if available:

Description of changes:

By submitting this pull request

• I confirm that my contribution is made under the terms of the Apache 2.0 license.
• I confirm that I've made a best effort attempt to update all relevant documentation.