ci(workflows): add explicit permissions to GitHub Actions workflows

[rnyb]

• codecov and linting workflows: Set contents:read
• subscript workflow: Introduces a new deploy-docs job, uploads/downloads a docs artifact, renames the main job (subscript -> test), and changes the Git push strategy

[Copilot]

Pull request overview

Adds explicit permissions blocks to GitHub Actions workflows to align with least-privilege defaults and enable required write operations.

Changes:

• Add contents: write permissions to the subscript workflow (to support write operations like pushing to gh-pages).
• Add contents: read permissions to the linting and codecov workflows.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/subscript.yml	Adds workflow-level contents: write permissions.
.github/workflows/linting.yml	Adds workflow-level contents: read permissions.
.github/workflows/codecov.yml	Adds workflow-level contents: read permissions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.53%. Comparing base (258eebf) to head (123dd4e).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #867   +/-   ##
=======================================
  Coverage   84.53%   84.53%           
=======================================
  Files          49       49           
  Lines        7405     7405           
=======================================
  Hits         6260     6260           
  Misses       1145     1145           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

[alifbe]

Looks good to me 👍