ci: set umask 022 in package/verify tasks too (jerbuild creates group-writable cache dirs during pkg operations)

ober

a75df2f5ddeb2a69a4dc3757e005c5826daf62db

diff --git a/.builds/ci.yml b/.builds/ci.yml
index 3f55434..3cc41d8 100644
--- a/.builds/ci.yml
+++ b/.builds/ci.yml
@@ -31,6 +31,7 @@ tasks:
     make jerboa CHEZ_CONFIGURE_EXTRA=--disable-x11 JERBOA_NATIVE_FEATURES=tls JERBOA_CC_OPT=-O0
     echo 'export PATH="$HOME/jerboa/dist:$PATH"' >> ~/.buildenv
 - package: |
+    umask 022
     cd jerboa-proton-bridge
     J="$HOME/jerboa/dist/jerboa"
     mkdir -p "$HOME/.cache" && chmod -R go-w "$HOME/.cache"
@@ -41,5 +42,6 @@ tasks:
     "$J" pkg verify "$PWD/jerboa-proton-bridge-0.1.0.jpkg"
     "$J" pkg verify --reproduce
 - verify: |
+    umask 022
     cd jerboa-proton-bridge
     PATH="$HOME/jerboa/dist:$PATH" JERBUILD="$HOME/jerboa/dist/jerbuild" make verify