v0.1.0: Release job: grant pull-requests: read

The first release run after claude-code-web#6 failed at its first API call. GET /repos/{repo}/commits/{sha}/pulls returned 403 ("Resource not accessible by integration") because the workflow token had no pull-requests scope. This grants pull-requests: read.

Merging this is also the first real run of the release job, and should produce v0.1.0.

🤖 Generated with Claude Code

https://claude.ai/code/session_01R5XxmiR28R15untFmoAMDW

---

Image: ghcr.io/cmmichael/claude-code-remote-container:0.1.0 (also :0.1)
Digest: sha256:c91ae416b555f6fbf54e593a776d5868013519aca4cd6caca1edeca764ddce33