ci: set umask 022 to prevent group-writable cache dirs (sr.ht default umask creates 0775 dirs)

ober

1a1b7ec21fb127d4259ba8a5820e7e4bf526f0b4

diff --git a/.builds/ci.yml b/.builds/ci.yml
index aefd26e..e24b7bb 100644
--- a/.builds/ci.yml
+++ b/.builds/ci.yml
@@ -20,6 +20,7 @@ artifacts:
 - jerboa-pcre2/jerboa-pcre2-0.1.0.jpkg
 tasks:
 - build-jerboa: |
+    umask 022
     cd jerboa
     sudo fallocate -l 4G /swapfile && sudo chmod 600 /swapfile && sudo mkswap /swapfile && sudo swapon /swapfile
     export CARGO_BUILD_JOBS=1