fix(ci): conform to updated workflows (estate rules, K9, SPDX, permissions)

Author: hyperpolymath

generated/k9iser/cargo-manifest.k9

@@ -1,8 +1,11 @@
+K9!
+# SPDX-License-Identifier: MPL-2.0
 # Auto-generated K9 contract for cargo-manifest
 # Safety tier: hunt
 
 [must]
-package.name : string { == 'panic-attack' }
+package.name : string {
+  pedigree = { schema_version = "1.0.0", name = "cargo-manifest.k9" }, == 'panic-attack' }
 package.edition : string { == '2021' }
 profile.release.codegen-units : string { == 1 }
 profile.release.strip : string { == 'symbols' }

generated/k9iser/container-build.k9

@@ -1,8 +1,11 @@
+K9!
+# SPDX-License-Identifier: MPL-2.0
 # Auto-generated K9 contract for container-build
 # Safety tier: hunt
 
 [must]
-metadata.license : string { == 'MPL-2.0' }
+metadata.license : string {
+  pedigree = { schema_version = "1.0.0", name = "container-build.k9" }, == 'MPL-2.0' }
 metadata.registry : string { == 'ghcr.io/hyperpolymath' }
 build.runtime : string { == 'podman' }
 layers.base.verify : bool { == true }