fix: grant the deploy workflow read access to the repository