fix(ci): repair the permissions block indentation (#557)

The `permissions:` block added by the caller-permission campaign was
indented one level too deep (appended at job-child indent + 2), which
makes the whole workflow file invalid YAML (`mapping values are not
allowed here`) and stops the workflow loading at all. This dedents the
block to job-key level — keeping the grants — and validates the file
parses before committing.

Author: hyperpolymath

.github/workflows/governance.yml

@@ -36,7 +36,7 @@ permissions:
 jobs:
   governance:
     uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@da2c748aad55c1a1dcba00b60fe4a35017bc6540
-      permissions:
-        actions: read
-        contents: read
-        security-events: write
+    permissions:
+      actions: read
+      contents: read
+      security-events: write

.github/workflows/mirror.yml

@@ -17,7 +17,7 @@ jobs:
   mirror:
     uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd
     secrets: inherit
-      permissions:
-        actions: read
-        contents: read
-        security-events: write
+    permissions:
+      actions: read
+      contents: read
+      security-events: write