fix: cp-7.78.0 add correct permissions to running perf builds

[cortisiko]

Description

Updates the run-performance-e2e-experimental.yml and run-performance-e2e-release.yml GitHub Actions workflows to grant permissions.contents: write (instead of read-only) so they are at least as permissive as the reusable run-performance-e2e.yml workflow they call.

Adds an inline comment documenting the transitive requirement (via the BrowserStack upload workflows).

Changelog

CHANGELOG entry:

Related issues

Fixes:

Manual testing steps

Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]

Screenshots/Recordings

Before

After

Pre-merge author checklist

• I've followed MetaMask Contributor Docs and MetaMask Mobile Coding Standards.
• I've completed the PR template to the best of my ability
• I've included tests if applicable
• I've documented my code using JSDoc format if applicable
• I've applied the right labels on the PR (see labeling guidelines). Not required for external contributors.

Performance checks (if applicable)

• I've tested on Android
  • Ideally on a mid-range device; emulator is acceptable
• I've tested with a power user scenario
  • Use these power-user SRPs to import wallets with many accounts and tokens
• I've instrumented key operations with Sentry traces for production performance metrics
  • See trace() for usage and addToken for an example

For performance guidelines and tooling, see the Performance Guide.

Pre-merge reviewer checklist

• I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
• I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

---

Note

Low Risk
Low risk workflow-only change that broadens GitHub token permissions to match the called reusable workflow; main risk is over-permissioning if not actually required.

Overview
Updates the run-performance-e2e-experimental.yml and run-performance-e2e-release.yml GitHub Actions workflows to grant permissions.contents: write (instead of read-only) so they are at least as permissive as the reusable run-performance-e2e.yml workflow they call.

Adds an inline comment documenting the transitive requirement (via the BrowserStack upload workflows).

^{Reviewed by Cursor Bugbot for commit 54b2260. Bugbot is set up for automated code reviews on this repo. Configure here.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud