* ci: declare minimal GITHUB_TOKEN permissions (contents: read)
Clears the CodeQL actions/missing-workflow-permissions alert. These CI jobs only check out code and run tests, so contents: read is sufficient.
* chore: refresh packaging and retain node integration smoke
* test: retain budget integration in node cleanup
* style: clean budget integration test EOF
---------
Co-authored-by: Muse Code <muse@example.com>
