ci: add permissions: write + secrets:inherit to deploy.yml

The deploy.yml was missing a permissions: block, which means GitHub defaults
to read-only access for public repos. This prevents the nested reusable ci.yml
(permissions: contents: write) from starting, causing startup_failure.

Also adds secrets: inherit to the ci: job so secrets flow through the
reusable workflow chain.

Agent-Session: fix-e2e-ref-20260617

.github/workflows/deploy.yml

@@ -4,6 +4,9 @@ on:
   push:
     branches: [main]
 
+permissions:
+  contents: write
+
 concurrency:
   group: deploy-peptide-starter-theme
   cancel-in-progress: true
@@ -15,6 +18,7 @@ jobs:
   # "ci / ci (lint-php (8.1))" etc.
   ci:
     uses: ./.github/workflows/ci.yml
+    secrets: inherit
 
   deploy:
     name: Deploy (shared pipeline)