bugfix: update permissions and improve error handling in PR comment workflow

[cfc4n]

This pull request updates the pr_build_debug.yml GitHub Actions workflow to improve security and reliability. The most important changes are:

Permissions and Security:

• Changed the contents permission from write to read and added actions: read to limit the workflow’s access scope, following the principle of least privilege.

Workflow Reliability and Correctness:

• Added a conditional to the "Comment PR with Download Links" job so it only runs for pull requests from the same repository, preventing issues with forks.
• Explicitly set the github-token input for the actions/github-script step to ensure proper authentication.
• Wrapped the comment creation in a try/catch block to log success or failure, improving error handling and debugging information.

fix: #852

[Copilot]

Pull Request Overview

This PR improves the security and reliability of the GitHub Actions workflow for commenting on pull requests with debug build artifacts. It implements the principle of least privilege by reducing permissions and adds proper error handling.

• Reduced workflow permissions from contents: write to contents: read and added actions: read
• Added conditional check to prevent the comment job from running on forked PRs
• Improved error handling with try/catch block and explicit token configuration

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[github-actions]

🔧 Debug Build Complete (PR 853, RunID 18442172118)

📦 Download Links:

• PR 853 Debug Binary

⏰ Files will be retained for 7 days, please download and test promptly.