fix(e2e): grant package read permissions to e2e job

This ensures the reusable e2e workflow has the necessary permissions to pull the sandbox image from GHCR.

.github/workflows/orchestrator.yml

@@ -69,6 +69,9 @@ jobs:
     name: 'E2E Checks'
     needs: ['build-and-publish', 'get-vars']
     uses: './.github/workflows/e2e.yml'
+    permissions:
+      contents: 'read'
+      packages: 'read'
     with:
       version: '${{ needs.build-and-publish.outputs.version }}'
       cli-package-name: '${{ needs.get-vars.outputs.cli-package-name }}'