fix: add actions:read permission to Claude Code workflow

The reusable workflow in spx-gh-actions requests actions:read, but the
caller workflow didn't grant it, causing GitHub to reject the workflow.

Author: simonheimlicher

.github/workflows/claude.yml

@@ -21,6 +21,7 @@ permissions:
   issues: read
   pull-requests: read
   id-token: write
+  actions: read
 
 jobs:
   claude:
@@ -29,6 +30,7 @@ jobs:
       issues: read
       pull-requests: read
       id-token: write
+      actions: read
     uses: simonheimlicher/spx-gh-actions/.github/workflows/claude.yml@main
     secrets:
       CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}