ci: fix deploy.yml permissions + secrets for reusable workflow (#10)

Fix permissions: read to write and add secrets: inherit to ci job.
Resolves startup_failure caused by permissions mismatch with reusable ci.yml.

Agent-Session: fix-e2e-ref-20260617

.github/workflows/deploy.yml

@@ -5,7 +5,7 @@ on:
     branches: [ main ]
 
 permissions:
-  contents: read
+  contents: write
 
 concurrency:
   group: deploy-peptide-reconstitution-calculator
@@ -15,6 +15,7 @@ jobs:
   ci:
     name: Pre-deploy CI
     uses: ./.github/workflows/ci.yml
+    secrets: inherit
 
   deploy:
     name: Deploy (shared pipeline)