debian: avoid possibly wrong umask for RELEASE-VERSION which is written during packaging