fix(cas-reference-product): harden CI workflow permissions and fix failure-chaining bugs (#10)

* ci: harden workflow permissions and timeouts

* test(contracts): sync immutable registry release

* fix(foundry): preserve workflow failure causes

* fix(api): preserve workflow failure chaining

* fix(security): sanitize provider span failures

---------

Co-authored-by: Kim Harjamäki <kim.harjamaki@prosimo.fi>

Author: OgeonX-Ai