fix(ci): remove auto-commit WASM step — blocked by branch protection on main

The wasm auto-commit step from PR #423 fails with GH013 (branch protection
rules prevent direct pushes to main, even from CI). This aborts the entire
deploy pipeline before Vercel runs.

The WASM is now committed in git (PR #423), so the auto-commit step is
redundant for normal deploys. When wasm/ source changes, rebuild and commit
manually. Revert permissions back to contents: read.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 2 people

.github/workflows/website.yml

@@ -10,7 +10,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
+  contents: read
 
 concurrency:
   group: vercel-production
@@ -39,18 +39,6 @@ jobs:
           cp playground/gosqlx.wasm ../website/public/wasm/
           cp playground/wasm_exec.js ../website/public/wasm/
 
-      - name: Commit rebuilt WASM if changed
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add website/public/wasm/gosqlx.wasm website/public/wasm/wasm_exec.js
-          if git diff --cached --quiet; then
-            echo "WASM unchanged, skipping commit"
-          else
-            git commit -m "chore(wasm): rebuild gosqlx.wasm from updated wasm/ source [skip ci]"
-            git push origin main
-          fi
-
       - name: Setup Node
         uses: actions/setup-node@v4
         with: