fix(ci): repair the permissions block indentation (#756)

The `permissions:` block added by the caller-permission campaign was
indented one level too deep (appended at job-child indent + 2), which
makes the whole workflow file invalid YAML (`mapping values are not
allowed here`) and stops the workflow loading at all. This dedents the
block to job-key level — keeping the grants — and validates the file
parses before committing.

Author: hyperpolymath

.github/workflows/mirror.yml

@@ -14,7 +14,7 @@ jobs:
   mirror:
     uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd
     secrets: inherit
-      permissions:
-        actions: read
-        contents: read
-        security-events: write
+    permissions:
+      actions: read
+      contents: read
+      security-events: write