Add permissions to claude

I got this message on a prev pr:

> The codegen (npx convex dev --once) and deployment steps would require Bash permissions to be configured in my --allowedTools. You can run these manually:

> npx convex dev --once (for codegen)

Could you change the .github/ workflow or whatever to grant these permissions @claude

Inspect the workflow files under .github/ and identify the steps that run npx convex dev --once and deployment. Check how --allowedTools currently handles Bash permissions, then verify that both codegen and deployment can run without requiring manual permission changes.

Written by the indexing model from the issue text.