Fix badge workflow PR comment permissions

[bsbodden]

Summary

• Add PR comment permissions to the badge workflow token
• Treat comment-posting failures as warnings so badge calculation remains the required signal

Investigation

The failing badge action calculates the MFCQI score successfully, then fails while posting the PR comment with 403 Resource not accessible by integration. The job token only had contents: write, while the API response requires issues=write or pull_requests=write.

Validation

• Parsed .github/workflows/mfcqi-badge.yml with PyYAML

[github-actions]

✅ MFCQI Score: 0.87 → (±0.000)

➡️ Previous: 0.87

Code quality meets the minimum threshold (0.70).

[github-actions]

✅ Code Quality Report

Metric	Score	Status
MFCQI Score	0.8713324632676854	✅ Good
Test Coverage	82%	✅ Good
Security Issues	0	✅ Clean

Quality Gates

• MFCQI Score: ✅ Minimum 0.75 (Current: 0.8713324632676854)
• Test Coverage: ✅ Minimum 80% (Current: 82%)
• Security: ✅ Zero vulnerabilities (Current: 0)

🎉 All quality gates passed! This PR maintains high code quality standards.

📊 View detailed MFCQI breakdown

Run mfcqi analyze src/mfcqi locally to see detailed metrics breakdown.