chore: update opencode workflow permissions

- Moved permissions section to the top level of the opencode workflow for clarity.
- Removed redundant permissions declaration from the job level.