Deploy workflow must declare `permissions: contents: write` at workflow level
to allow the nested reusable ci.yml (which needs write for phpcbf auto-commit)
to run. Also adds `secrets: inherit` to the ci job so secrets propagate through.
Pre-existing issue introduced during CI standardization (startup_failure root cause).
Agent-Session: fix-e2e-ref-20260617
029c090361