fix(ci): repair the permissions block indentation (#126)

The `permissions:` block added by the caller-permission campaign was
indented one level too deep (appended at job-child indent + 2), which
makes the whole workflow file invalid YAML (`mapping values are not
allowed here`) and stops the workflow loading at all. This dedents the
block to job-key level — keeping the grants — and validates the file
parses before committing.

Author: hyperpolymath

.github/workflows/governance.yml

@@ -35,7 +35,7 @@ permissions:
 jobs:
   governance:
     uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
-      permissions:
-        actions: read
-        contents: read
-        security-events: write
+    permissions:
+      actions: read
+      contents: read
+      security-events: write

.github/workflows/mirror.yml

@@ -16,7 +16,7 @@ jobs:
   mirror:
     uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
     secrets: inherit
-      permissions:
-        actions: read
-        contents: read
-        security-events: write
+    permissions:
+      actions: read
+      contents: read
+      security-events: write