fix: harden phase 8 CI workflow and checks

Co-authored-by: Eriyc <50216491+Eriyc@users.noreply.github.com>

.github/workflows/ci.yml

@@ -7,6 +7,8 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:
@@ -24,4 +26,6 @@ jobs:
       - uses: actions/checkout@v4
       - uses: bazel-contrib/setup-bazel@0.15.0
       - name: Run tests (${{ matrix.phase8_target }})
-        run: bazel test //tests/...
+        run: |
+          echo "Phase 8 target: ${{ matrix.phase8_target }}"
+          bazel test //tests/...