Update CHANGELOG-EE.md for 12.6.2-ee

[ci skip]

CHANGELOG-EE.md

 Please view this file on the master branch, on stable branches it's out of date.
 
+## 12.6.2
+
+### Security (2 changes)
+
+- Don't publish drafts if user can't create notes.
+- Remove protected tag access when group is removed.
+
+
 ## 12.6.1
 
 - No changes.

ee/changelogs/unreleased/security-pb-locked-mr-drafts-publish.yml

----
-title: Don't publish drafts if user can't create notes
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-pb-protected-tags-remove-group.yml

----
-title: Remove protected tag access when group is removed
-merge_request:
-author:
-type: security