Add explicit permissions blocks to CI workflows

Limit GITHUB_TOKEN permissions to contents:read by default, as
recommended by GitHub's security scanner. The create-release job
overrides this with contents:write as needed.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

test macos 15 too (#405)

* test macos 15 too

* ditch update

* os

* Fix matrix key from 'operating-system' to 'os'

* try octal printf

* more macos fixes

* operating-system -> os

* last operating system -> os

* remove error indent

Merge pull request #319 from imclerran/fix-invalid-try

Replace invalid ? operator with try

Tag required for a testing build in roc CI

add generate docs workflow

Just testing the hyper upgrade with the roc release process

Release for basic-cli 0.18.0

Merge branch 'main' of github.com:roc-lang/basic-cli into split-update

Merge pull request #261 from roc-lang/fix-jump-start

fix jump-start.sh

0.15.0 release