build(ci): add permissions