Several CI/Workflow changes and fixes

[StrangeRanger]

No description provided.

[Copilot]

Pull Request Overview

This PR repositions the permissions section in GitHub workflow files to follow the standard YAML structure by placing it after the name and before the on trigger sections.

• Moved permissions section from after on triggers to before them in both workflow files
• Updated permissions for mkdocs-deploy.yml from contents: write to contents: read

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/update-from-submodule.yml	Relocated permissions section to standard position
.github/workflows/mkdocs-deploy.yml	Relocated permissions section and changed from write to read access

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Pull Request Overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Pull Request Overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}