refactor: move scripts permissions check to dedicated CI workflow

Move the scripts-permissions job from github-actions-workflows.yml to
a new continuous-integration.yml workflow, following the same pattern
as the rust template. This better organizes CI checks into their own
dedicated workflow.

Author: claude

.github/workflows/continuous-integration.yml

@@ -0,0 +1,19 @@
+name: Continuous Integration (CI)
+
+on: pull_request
+
+permissions:
+  contents: read
+
+jobs:
+  scripts-permissions:
+    name: Scripts Permissions
+    runs-on: ${{ matrix.architecture }}
+    strategy:
+      matrix:
+        architecture: [ubuntu-24.04, ubuntu-24.04-arm]
+    steps:
+      - name: Checkout code.
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - name: Check scripts permissions.
+        run: make check-scripts-permissions

.github/workflows/github-actions-workflows.yml

@@ -33,15 +33,3 @@ jobs:
         uses: cachix/install-nix-action@4e002c8ec80594ecd40e759629461e26c8abed15 # v31.9.0
       - name: Check GitHub Actions workflows linting.
         run: nix develop -c make check-github-actions-workflows-linting
-
-  scripts-permissions:
-    name: Scripts Permissions
-    runs-on: ${{ matrix.architecture }}
-    strategy:
-      matrix:
-        architecture: [ubuntu-24.04, ubuntu-24.04-arm]
-    steps:
-      - name: Checkout code.
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - name: Check scripts permissions.
-        run: make check-scripts-permissions