fix: add missing permissions to ci job in main-ci.yml

Co-authored-by: neilime <314088+neilime@users.noreply.github.com>

Author: Copilot

.github/workflows/main-ci.yml

@@ -22,8 +22,10 @@ jobs:
     uses: ./.github/workflows/__shared-ci.yml
     secrets: inherit
     permissions:
+      actions: read
       contents: read
       security-events: write
+      statuses: write
       # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
       id-token: write