docs: fix public report path and tighten workflow permissions

Author: vimukthi101

.github/workflows/tests.yml

@@ -8,7 +8,6 @@ on:
 
 permissions:
   contents: read
-  id-token: write   # required for npm provenance on publish
 
 jobs:
   # Run Node-only unit tests across supported runtime versions.

README.md

@@ -193,7 +193,7 @@ Example output (all metrics pass — no regressions):
 
   [cypress-perf-baseline] Run complete (21.8s)
   Snapshots: 3  |  Regressions: 0
-  Report → cypress/integration-reports/perf-report.html
+  Report → cypress/perf-reports/perf-report.html
   All metrics within thresholds — no regressions.
 ```