Control GitHub Actions cache access with cache-mode

GitHub Actions introduces cache-mode, letting workflows set read, write, write-only, or none cache permissions at workflow or job level. The default read‑only for low‑trust events reduces cache‑poisoning risk, and explicit modes trigger warnings when overly permissive. This feature is generally available across all plans.