CI: fix workflow permissions (#62)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

.github/workflows/run.yml

@@ -1,4 +1,6 @@
 name: Generate routing rules for Surge
+permissions:
+  contents: write
 on:
   workflow_dispatch:
   schedule:
@@ -32,7 +34,7 @@ jobs:
         shell: bash
 
       - name: Checkout the default branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Make directory
         run: |
@@ -117,7 +119,7 @@ jobs:
           mv ruleset ./publish/
 
       - name: Release and upload assets
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           name: ${{ env.RELEASE_NAME }}
           tag_name: ${{ env.TAG_NAME }}

README.md

@@ -1,4 +1,4 @@
-# 简介
+# 简介 ![GitHub Downloads (all assets, all releases)](https://img.shields.io/github/downloads/Loyalsoldier/surge-rules/total?logo=github) [![jsdelivr stats](https://data.jsdelivr.com/v1/package/gh/Loyalsoldier/surge-rules/badge?style=rounded)](https://www.jsdelivr.com/package/gh/Loyalsoldier/surge-rules)
 
 本项目生成适用于 [**Surge**](https://nssurge.com) 的规则集（DOMAIN-SET 和 RULE-SET）。使用 GitHub Actions 北京时间每天早上 6:30 自动构建，保证规则最新。