ci: fix permission, upgrade node version

[baiwusanyu-c]

No description provided.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
bumpp	9.1.1	network, filesystem, environment	+4	2.66 MB	antfu
rollup	3.26.3	eval, filesystem, environment	+0	2.5 MB	lukastaegert
@babel/parser	7.22.7	environment	+0	3.72 MB	nicolo-ribaudo
eslint	8.43.0	filesystem, environment	+2	3.78 MB	eslintbot
sass	1.63.6	filesystem	+0	4.72 MB	sassbot
less	4.2.0...4.1.3	None	+0/-13	2.78 MB	matthew-dean
vite	4.4.9...4.4.2	None	+4/-62	13.4 MB	vitebot
webpack	5.88.2...5.88.0	None	+3/-73	7.4 MB	thelarkinn
simple-git-hooks	2.9.0...2.8.1	None	+0/-0	14.6 kB	toplenboren
lint-staged	13.3.0...13.2.3	None	+0/-51	112 kB	okonet
sucrase	3.34.0...3.32.0	None	+0/-25	1.12 MB	alangpierce

🚮 Removed packages: @ast-grep/napi@0.6.7, @babel/types@7.22.11, @baiwusanyu/eslint-config@1.0.15, @rollup/pluginutils@5.0.4, @types/css-tree@2.3.1, @types/debug@4.1.8, @types/estree@1.0.1, @types/fs-extra@11.0.1, @types/gulp@4.0.13, @types/hash-sum@1.0.0, @vitejs/plugin-vue-jsx@3.0.2, @vitest/coverage-c8@0.32.4, @vitest/ui@0.33.0, @vue/babel-plugin-jsx@1.1.5, @vue/cli-plugin-babel@5.0.8, @vue/cli-plugin-typescript@5.0.8, @vue/compiler-dom@3.3.4, @vue/compiler-sfc@3.3.4, baiwusanyu-utils@1.0.15, chalk@4.1.2, estree-walker-ts@1.0.1, fast-glob@3.3.1, fs-extra@11.1.1, gulp@4.0.2, hash-sum@2.0.0, jsdom@22.1.0, magic-string-ast@0.2.0, rimraf@5.0.1, unplugin@1.4.0, vue@3.3.4