fix(ci): grant permissions required by template v1.1.16 nested jobs

claude-assistant-callable after-claude needs actions: write and
claude-merge-gate-callable claude-assess needs statuses: write; reusable
workflows cannot elevate beyond the caller's grant.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

.github/workflows/claude-merge-gate.yml

@@ -87,6 +87,7 @@ jobs:
       issues: write
       actions: read
       id-token: write
+      statuses: write  # security/outsider-review status (v1.1.16)
     uses: MervinPraison/github-automation-template/.github/workflows/[email protected]
     secrets: inherit
     with:

.github/workflows/claude.yml

@@ -16,7 +16,7 @@ jobs:
       contents: write
       pull-requests: write
       issues: write
-      actions: read
+      actions: write  # after-claude job (v1.1.16)
       id-token: write
     uses: MervinPraison/github-automation-template/.github/workflows/[email protected]
     secrets: inherit