fix(ci): update ci-templates SHA (permissions fix)

[Jesssullivan]

Summary

• Updates js-bazel-package.yml SHA from @7dddffb to @f2e12c1
• ci-templates PR feat: v0.5.0 - remove acuity-scraper, add Bazel 8 config #11 removed per-job permissions blocks that caused startup_failure

Root cause

Reusable workflows cannot expand GITHUB_TOKEN permissions beyond what the caller grants. The repo's default is read, but publish jobs requested id-token: write and packages: write. GitHub rejected the entire workflow at planning time.

Test plan

• CI creates jobs (no startup_failure)
• Unit tests pass on self-hosted runner

[greptile-apps]

Greptile Summary

This PR updates the reusable workflow SHA in .github/workflows/ci.yml from @7dddffb to @f2e12c10580f17d54ac48434e2577fbcfe502a05, picking up a fix from ci-templates PR #11 that removed per-job permissions blocks. GitHub rejects reusable workflow calls at planning time when the callee declares permissions exceeding the caller's GITHUB_TOKEN grant, so removing those blocks from the template resolves the startup_failure.

Confidence Score: 5/5

Safe to merge — single-line SHA update that fixes a known CI startup_failure with no logic changes.

The change is minimal (one SHA updated), the root cause is well-understood and documented, and no new logic or permissions are introduced on the caller side. All remaining observations (dry_run: true) are pre-existing and out of scope for this PR.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	SHA bumped from @7dddffb to @f2e12c10580f17d54ac48434e2577fbcfe502a05; no structural changes to the caller workflow; dry_run: true remains set (pre-existing)

Sequence Diagram

sequenceDiagram
    participant GH as GitHub Actions
    participant Caller as ci.yml (caller)
    participant Template as js-bazel-package.yml @f2e12c1

    GH->>Caller: push / pull_request / workflow_dispatch
    Caller->>Template: uses: tinyland-inc/ci-templates/...@f2e12c1
    Note over Caller,Template: secrets: inherit, no per-job permissions block (fix)
    Template->>Template: lint / typecheck / unit tests
    Template->>Template: integration tests
    Template->>Template: build / package (dry_run: true)
    Template-->>Caller: job results
    Caller-->>GH: CI complete

Loading

_{Reviews (1): Last reviewed commit: "fix(ci): update ci-templates SHA to f2e1..." | Re-trigger Greptile}