ci: grant actions:read for Playwright validate wait on PRs

Co-authored-by: cynarAI <cynarAI@users.noreply.github.com>

.github/workflows/playwright.yml

@@ -65,10 +65,9 @@ jobs:
         if: github.event_name == 'pull_request'
         env:
           GH_TOKEN: ${{ github.token }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
         run: |
           set -euo pipefail
-          sha="${HEAD_SHA:-$GITHUB_SHA}"
+          sha="${GITHUB_SHA}"
           echo "Waiting for publish-server-image on ${sha} before starting Vite…"
           for attempt in $(seq 1 120); do
             run_id="$(gh run list --repo "${GITHUB_REPOSITORY}" --commit "${sha}" \