fix: move permissions to workflow level in reusable workflow callers

permissions must be set at the workflow level (not job level) when using
reusable workflows. Also add secrets: inherit so GITHUB_TOKEN flows through
to the called workflow for git tag/push operations.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: aksOps

.github/workflows/beta.yml

@@ -4,8 +4,10 @@ on:
   push:
     branches: [main]
 
+permissions:
+  contents: write
+
 jobs:
   auto-beta:
     uses: RandomCodeSpace/central-ops/.github/workflows/reusable-auto-beta.yml@main
-    permissions:
-      contents: write
+    secrets: inherit

.github/workflows/release.yml

@@ -7,10 +7,12 @@ on:
         description: 'Base beta version to release (e.g., v0.0.5-beta)'
         required: true
 
+permissions:
+  contents: write
+
 jobs:
   release:
     uses: RandomCodeSpace/central-ops/.github/workflows/reusable-release.yml@main
-    permissions:
-      contents: write
+    secrets: inherit
     with:
       version: ${{ inputs.version }}