ci: fix bundle size reporting on PRs

- Add pull-requests: write permission so compressed-size-action can
  post comments
- Add strip-hash to normalize content-hashed filenames across builds

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: pauldambra

.github/workflows/ci-cd.yml

@@ -8,6 +8,9 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  pull-requests: write
+
 jobs:
   release:
     name: Tests
@@ -47,6 +50,7 @@ jobs:
          build-script: "build:all"
          compression: "none"
          pattern: "**/dist/*.{js,cjs,mjs,css}"
+         strip-hash: "-[A-Za-z0-9_]{8}\\."
 
       - name: Upload diff images to GitHub
         uses: actions/upload-artifact@v4