ci: don't let test-result publishing fail the Test job

The "Publish results" step (EnricoMi/publish-unit-test-result-action)
fails the whole job when GitHub throttles its PR-lookup endpoint (HTTP
429), even though lint and tests passed. Mark it continue-on-error and
grant the action the checks/pull-requests permissions it needs to use
the API instead of falling back to unauthenticated scraping.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Wizard1209

.github/workflows/test.yml

@@ -15,6 +15,10 @@ jobs:
   test:
     name: Test
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      checks: write
+      pull-requests: write
     strategy:
       matrix:
         include:
@@ -64,5 +68,7 @@ jobs:
       - name: Publish results
         uses: EnricoMi/publish-unit-test-result-action/composite@v2
         if: always()
+        # Publishing results must never fail the job (e.g. GitHub API 429 throttling).
+        continue-on-error: true
         with:
           junit_files: "*.xml"