ci: authenticate Camoufox release fetches

.github/workflows/ci.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [master]
 
+permissions:
+  contents: read
+
 jobs:
   unit:
     runs-on: ubuntu-latest
@@ -64,6 +67,9 @@ jobs:
 
       - name: Install Camoufox
         run: npm run fetch-bin
+        env:
+          # camoufox-js uses this for authenticated GitHub release lookups.
+          GITHUB_TOKEN: ${{ github.token }}
 
       - name: Verify Windows process cleanup
         shell: pwsh
@@ -143,6 +149,9 @@ jobs:
 
       - name: Install Camoufox
         run: npm run fetch-bin
+        env:
+          # camoufox-js uses this for authenticated GitHub release lookups.
+          GITHUB_TOKEN: ${{ github.token }}
 
       - name: Run browser E2E tests
         shell: pwsh