fix(ci): grant the calling job the union of the callee's permissions …

fix(ci): grant the calling job the union of the callee's permissions … #153